Static task
static1
Behavioral task
behavioral1
Sample
grooveintlresource.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
grooveintlresource.dll
Resource
win10v2004-20230703-en
General
-
Target
grooveintlresource.dll.bak
-
Size
8.5MB
-
MD5
94dfc73e8b59ec72704be75761839cb2
-
SHA1
faa299ba0c3591a9d95ad9f9ea53b9b4995c7290
-
SHA256
82c0b9c13628db3f2679410125a169382880991c03e313402a1b72398ea56300
-
SHA512
e0fd3515f5588ca7aaf78e4f8f4ae83c862bbdc80a44441a9096ff59af31f437656d85619aa2ebd5c73d4317490f2b627275ad7bf58eebf6d2c5dd9342243597
-
SSDEEP
98304:t5AFNzQzLIabjKoh9WjIabjKoh9Wom8Azo7MgIHQ:sAzOMgIHQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource grooveintlresource.dll.bak
Files
-
grooveintlresource.dll.bak.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.rdata Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8.5MB - Virtual size: 8.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ