Static task
static1
Behavioral task
behavioral1
Sample
control.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
control.dll
Resource
win10v2004-20230220-en
General
-
Target
control.dll
-
Size
11KB
-
MD5
9514525a5b412d9638ac25b3a53ba844
-
SHA1
8dbddb4a40b85a3a71822d064694d75a1b5a399d
-
SHA256
0e2c7f73dc1befafafb443bea3886ce849be401c21656007e9dfd8a74778a68d
-
SHA512
d4395341061223f9cf289f3a1839b224b782941cd41c406fd71af055d191ee904a411c6d50cbb31ce5b6d963838a7efc91182e6d6bd947fd544a4d65daf54270
-
SSDEEP
192:PTQ/z5M5DbgrEWBVpXR85Hs5CNeqR4z49UnDvYht+pGM/jEGhH1XRVXRH1XRVXRZ:r2zrrEW/BR85MoNeqRHqnEL+wM/jvVRZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource control.dll
Files
-
control.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExeS Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE