PPSS_A
Static task
static1
Behavioral task
behavioral1
Sample
f2e747133a568d117f777bf5aa17f223b275ffd5b98c737ff5e4115cdb742c33.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
f2e747133a568d117f777bf5aa17f223b275ffd5b98c737ff5e4115cdb742c33.dll
Resource
win10v2004-20230621-en
General
-
Target
f2e747133a568d117f777bf5aa17f223b275ffd5b98c737ff5e4115cdb742c33
-
Size
1.7MB
-
MD5
c559517e2244385d87904bc47dc12e79
-
SHA1
7ca3bcc6562b83f27fa8d82354730043e238f995
-
SHA256
f2e747133a568d117f777bf5aa17f223b275ffd5b98c737ff5e4115cdb742c33
-
SHA512
20494b0c1d103395a6e254c371f1049d52fa6ebbdbfbf3f098a22a9b8ca95988d5b8b65d1a855a97f595f1ce62deda85db1eff1b2382d3b0ce1f514af670d4ca
-
SSDEEP
49152:DU+WbiyZ+QSxXBLHOkGEob5A1G7s4MTP5tl:Vts+15kVA1Gof
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2e747133a568d117f777bf5aa17f223b275ffd5b98c737ff5e4115cdb742c33
Files
-
f2e747133a568d117f777bf5aa17f223b275ffd5b98c737ff5e4115cdb742c33.dll windows x64
2081d7ca067bc55a0b3f6faf421d545e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
MoveFileW
user32
GetWindowTextLengthW
gdi32
SelectObject
advapi32
LookupPrivilegeValueW
shell32
SHGetSpecialFolderPathW
ole32
CoUninitialize
oleaut32
SystemTimeToVariantTime
comctl32
ImageList_Destroy
ntdll
NtQueryInformationThread
psapi
GetMappedFileNameW
shlwapi
PathFileExistsW
ws2_32
WSACleanup
gdiplus
GdipGetImagePaletteSize
iphlpapi
GetInterfaceInfo
msvcrt
_wcsnicmp
Exports
Exports
Sections
.text Size: 240KB - Virtual size: 596KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ