Static task
static1
Behavioral task
behavioral1
Sample
SpectreConsoledll.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
SpectreConsoledll.dll
Resource
win10v2004-20230703-en
General
-
Target
SpectreConsoledll.dll
-
Size
689KB
-
MD5
e2a9e4c34c215a8b75d030bcb6693f06
-
SHA1
fd3a6063da31b5a7d56fe50539deb169a2e7f1b9
-
SHA256
e87944494f5ed2c13c128ada90401c064f7e54a8af3c8164be0aa37f650b04a7
-
SHA512
d142ae1a1c6ef8a851963bede54c7a1c7fc476cafe026ee9b19ecb9545c03526b20edd104a5e9fdab8bc323816a4a664c933842dfc6bbd5f4250ce253907b806
-
SSDEEP
6144:gvF6lPrPO0w832/XbvD8oktkPl4kabMlAoDPeTleRZl2ph3iXICv+YeyK37xi7Qn:bh+bvEka6a8RGpMRv+YWVi7QRM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SpectreConsoledll.dll
Files
-
SpectreConsoledll.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 687KB - Virtual size: 686KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ