borisOutOFControl[.]dat[.]dll

Resubmissions

14/06/2023, 09:27

230614-leqzdafd8410

14/06/2023, 09:08

230614-k3wdbsfc463

13/06/2023, 17:04

230613-vk87kshd623

Sharing

Copy URL Twitter E-mail

General

Target
borisOutOFControl.dat.dll
Size 513KB
Sample230614-k3wdbsfc46
SHA256 53e705c56ff89ab514519a0a8be6727593e754004aff0fec0b58efb5a41c12ac
MD5 3b04f228ba4ffab9c470a17ddb5eccef
SHA1 09668a0fee892222ffa07bbbfc0dc2731d6509c5
SHA512 13a434aec41550f3d91ab0bc272486513c998a4b3dde73caefc5eea83819cce3e6cf47f7cf85c75dec3827ec543590bab0866516bf4ae8a26e1133af29c4e4c5
SSDEEP 12288:xspsY6tHFBPl7rNu5bZHZ95gjyIaa0Pxg:xspsY6tHFBd7rIl175gjyIl0O
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
borisOutOFControl.dat.dll

File Explorer

borisOutOFControl.dat.dll

.dll 513KB

borisOutOFControl.dat.dll

IMPHASH e09d215ae80f5f0ca983f1896ad77565
SHA256 53e705c56ff89ab514519a0a8be6727593e754004aff0fec0b58efb5a41c12ac
MD5 3b04f228ba4ffab9c470a17ddb5eccef
SHA1 09668a0fee892222ffa07bbbfc0dc2731d6509c5
SHA512 13a434aec41550f3d91ab0bc272486513c998a4b3dde73caefc5eea83819cce3e6cf47f7cf85c75dec3827ec543590bab0866516bf4ae8a26e1133af29c4e4c5
SSDEEP 12288:xspsY6tHFBPl7rNu5bZHZ95gjyIaa0Pxg:xspsY6tHFBd7rIl175gjyIl0O
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5120

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kuaL_addlstring kuaL_addstring kuaL_addvalue kuaL_argerror kuaL_buffinit kuaL_callmeta kuaL_checkany kuaL_checkinteger kuaL_checklstring kuaL_checknumber kuaL_checkoption kuaL_checkstack kuaL_checktype kuaL_checkudata kuaL_error kuaL_findtable kuaL_getmetafield kuaL_gsub kuaL_loadbuffer kuaL_loadfile kuaL_loadstring kuaL_newmetatable kuaL_newstate kuaL_openlib kuaL_openlibs kuaL_optinteger kuaL_optlstring kuaL_optnumber kuaL_prepbuffer kuaL_pushresult kuaL_ref kuaL_register kuaL_typerror kuaL_unref kuaL_where kua_atpanic kua_call kua_checkstack kua_close kua_concat kua_cpcall kua_createtable kua_dump kua_equal kua_error kua_gc kua_getallocf kua_getfenv kua_getfield kua_gethook kua_gethookcount kua_gethookmask kua_getinfo kua_getlocal kua_getmetatable kua_getstack kua_gettable kua_gettop kua_getupvalue kua_insert kua_iscfunction kua_isnumber kua_isstring kua_isuserdata kua_lessthan kua_load kua_newstate kua_newthread kua_newuserdata kua_next kua_objlen kua_pcall kua_pushboolean kua_pushcclosure kua_pushfstring kua_pushinteger kua_pushlightuserdata kua_pushlstring kua_pushnil kua_pushnumber kua_pushstring kua_pushthread kua_pushvalue kua_pushvfstring kua_rawequal kua_rawget kua_rawgeti kua_rawset kua_rawseti kua_remove kua_replace kua_resume kua_setallocf kua_setfenv kua_setfield kua_sethook kua_setlevel kua_setlocal kua_setmetatable kua_settable kua_settop kua_setupvalue kua_status kua_toboolean kua_tocfunction kua_tointeger kua_tolstring kua_tonumber kua_topointer kua_tothread kua_touserdata kua_type kua_typename kua_xmove kua_yield kuaopen_base kuaopen_debug kuaopen_io kuaopen_math kuaopen_os kuaopen_package kuaopen_string kuaopen_table klc_entry__3_0_0f klc_entry_copyright__3_0_0f must

Name

.text

Size

283KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

200B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

144KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

borisOutOFControl.dat.dll

kernel32