PPSS_A
Static task
static1
Behavioral task
behavioral1
Sample
54df8afba041c741a90779dfe210919746b78d10c90883126a24231b90839f47.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
54df8afba041c741a90779dfe210919746b78d10c90883126a24231b90839f47.dll
Resource
win10v2004-20230621-en
General
-
Target
54df8afba041c741a90779dfe210919746b78d10c90883126a24231b90839f47
-
Size
1.7MB
-
MD5
1997048785f30c9c2dec5f1fa8c42bfa
-
SHA1
53a3fa5ab8624c1caae7a346391a622fb15ca746
-
SHA256
54df8afba041c741a90779dfe210919746b78d10c90883126a24231b90839f47
-
SHA512
7a10ed8c28845eda55f0b55e314b2d3934c92d04b50b2ea972af86c5b9159192d6fcbb3e70cc193c7b4bf634f5bd6acc33f1a3ff43941e64ba7688fecbe998d0
-
SSDEEP
49152:bGJzj3CMs51GfT0Jl8e7B0kf9pVB9SpDx:8j3C/IGl8e7mSpVi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54df8afba041c741a90779dfe210919746b78d10c90883126a24231b90839f47
Files
-
54df8afba041c741a90779dfe210919746b78d10c90883126a24231b90839f47.dll windows x64
2081d7ca067bc55a0b3f6faf421d545e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
MoveFileW
user32
GetWindowTextLengthW
gdi32
SelectObject
advapi32
LookupPrivilegeValueW
shell32
SHGetSpecialFolderPathW
ole32
CoUninitialize
oleaut32
SystemTimeToVariantTime
comctl32
ImageList_Destroy
ntdll
NtQueryInformationThread
psapi
GetMappedFileNameW
shlwapi
PathFileExistsW
ws2_32
WSACleanup
gdiplus
GdipGetImagePaletteSize
iphlpapi
GetInterfaceInfo
msvcrt
_wcsnicmp
Exports
Exports
Sections
.text Size: 243KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ