Static task
static1
Behavioral task
behavioral1
Sample
30e1279362ffa77e843226de9b73ab758484c992b63588a19fc60528b9a3915b.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
30e1279362ffa77e843226de9b73ab758484c992b63588a19fc60528b9a3915b.dll
Resource
win10v2004-20230703-en
General
-
Target
30e1279362ffa77e843226de9b73ab758484c992b63588a19fc60528b9a3915b
-
Size
502KB
-
MD5
d1de3cca799472226ac85183683a690b
-
SHA1
f205b64482268ab6d56866f7b8bd529638a18764
-
SHA256
30e1279362ffa77e843226de9b73ab758484c992b63588a19fc60528b9a3915b
-
SHA512
726370144a1e947c2446d4bc4d8dbbe4eda1c92e45cfa577511d529f203b66794b74bee63bef80f6ae6e5189e2a778ad16a13eac0a633cdc6f52075d7c00d067
-
SSDEEP
12288:ioy8SyUX9QOcIo54XxyS+RTPUb15LKfGntTZ:ioy8tUaz4cRDUbPOO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30e1279362ffa77e843226de9b73ab758484c992b63588a19fc60528b9a3915b
Files
-
30e1279362ffa77e843226de9b73ab758484c992b63588a19fc60528b9a3915b.dll windows x64
6998a6f15991dd1d1d003519d9f6d0ab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
api-ms-win-crt-runtime-l1-1-0
_initterm
vcruntime140
memcmp
kernel32
QueryPerformanceCounter
python37
PySequence_List
Sections
.text Size: - Virtual size: 315KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 362KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 499KB - Virtual size: 498KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ