Static task
static1
Behavioral task
behavioral1
Sample
NABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZEFUTBVRQqH0HDOLQJIxkOlfapGfWIUtJCOvCRzR9RPADK9A.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
NABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZEFUTBVRQqH0HDOLQJIxkOlfapGfWIUtJCOvCRzR9RPADK9A.dll
Resource
win10v2004-20230703-en
General
-
Target
NABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZEFUTBVRQqH0HDOLQJIxkOlfapGfWIUtJCOvCRzR9RPADK9A3BbNJLJQZuQfek4EVHpEFCdcUgRGZ9YQWZGY0hqAcBKZ9QkP6c.dll
-
Size
596KB
-
MD5
e8fea89c3372b4a122e44733bcb79ccc
-
SHA1
b7d29fd24e791d1287702b2ba6d86cdaef164aab
-
SHA256
4d9fa0e24fc115cab26d85d0092a91b3b2f39fdee5d53c6a4849fc6147469b74
-
SHA512
916cf1c7870500ea1e83333b77de3bbe89e8c82d5098cd4664c7851b903ba89b5e53b8b25cb1b48f9c4808093f864c229e569cdcaba162cadb49d1113253d82c
-
SSDEEP
6144:hZehXn6WHxY/8BLqLIo7+Njq0BlIOI64hq3ql9RU2XgMQXwRJxcIz9nnbCd:haXNHfqTajzBlR48mX5h/xn4d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZEFUTBVRQqH0HDOLQJIxkOlfapGfWIUtJCOvCRzR9RPADK9A3BbNJLJQZuQfek4EVHpEFCdcUgRGZ9YQWZGY0hqAcBKZ9QkP6c.dll
Files
-
NABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZEFUTBVRQqH0HDOLQJIxkOlfapGfWIUtJCOvCRzR9RPADK9A3BbNJLJQZuQfek4EVHpEFCdcUgRGZ9YQWZGY0hqAcBKZ9QkP6c.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 594KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ