Static task
static1
Behavioral task
behavioral1
Sample
TABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZsUHNJ2UBF6n0LONizJBG1OiU97S2VzWjHPIGRNd9S4LJwRf.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZsUHNJ2UBF6n0LONizJBG1OiU97S2VzWjHPIGRNd9S4LJwRf.dll
Resource
win10v2004-20230220-en
General
-
Target
TABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZsUHNJ2UBF6n0LONizJBG1OiU97S2VzWjHPIGRNd9S4LJwRfDZIZAFFEli4FdHCTYMIMLBVEHpDK.dll
-
Size
562KB
-
MD5
97766321ced9ea9aef4ef8f997a0ef13
-
SHA1
25970fe30da32ccde331e9e05bec1e6f02ebe219
-
SHA256
766269938d1760e4ad0d6a3f4c1afd02b0b5c69d9d661f59ff4b6df0e22e0e54
-
SHA512
741b61b608ed77a77366af49d27a8f73251f43873123d586451a7fb3aa205a468ca2f40223668ee7476daaa30d8c9b5641f44a7058e5365b68b9fa5b1025e6e7
-
SSDEEP
6144:yObXYHsxAnWMos+xIp4lkkL7BUjyNruN4mjZIu7UVKY8lfDei5RP2cPqYHTq8+dq:yKYHX/ozHL1UpNI+iRoDb5x2cPAdd6j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZsUHNJ2UBF6n0LONizJBG1OiU97S2VzWjHPIGRNd9S4LJwRfDZIZAFFEli4FdHCTYMIMLBVEHpDK.dll
Files
-
TABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZsUHNJ2UBF6n0LONizJBG1OiU97S2VzWjHPIGRNd9S4LJwRfDZIZAFFEli4FdHCTYMIMLBVEHpDK.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ