Static task
static1
Behavioral task
behavioral1
Sample
eyukokov.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
eyukokov.dll
Resource
win10v2004-20230621-en
General
-
Target
eyukokov.7z
-
Size
1KB
-
MD5
2fed6a3682e98068c756da738ae9941c
-
SHA1
ab63eb2c288c610959e3eee82895d056466c056d
-
SHA256
7f39d9eeec38ab44ccdb97dc5944bd6e846bb0f79cfa5f1769661338644063d0
-
SHA512
79ff295511ae99871dedb9e2ea7d1c956b30258037b97e2b38806e9d68d3aaa6b7078f68406345ed311f3447d8169a4718bf74da147b79ba1e04a9d701bb5c3f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/eyukokov.dll
Files
-
eyukokov.7z.7z
Password: infected
-
eyukokov.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ