Static task
static1
Behavioral task
behavioral1
Sample
KABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZOFRSwUXFUP5E8LYHIuJXZxpPXVUTYQPEINX8QAuVbt_BUWPMnQGKBTVDQs.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
KABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZOFRSwUXFUP5E8LYHIuJXZxpPXVUTYQPEINX8QAuVbt_BUWPMnQGKBTVDQs.dll
Resource
win10v2004-20230703-en
General
-
Target
KABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZOFRSwUXFUP5E8LYHIuJXZxpPXVUTYQPEINX8QAuVbt_BUWPMnQGKBTVDQs.dll
-
Size
544KB
-
MD5
58ed97858e9a7c6ac20567f13d57e7a8
-
SHA1
18688ecf29707ed27fcd6a296ec7f49cf5526af1
-
SHA256
aa376dab5cd54a8a191d13102a0d89d6771db7cb99e4ec341bc8bccd5e1b4107
-
SHA512
60a3bfa8e85ee2a2622facd56f64c144cbe847eab2268159d7db64f09a2aa82981f39ea16de37ea7aa14c4524938045a1bf911e7d602ac1fa1018502cd341d7d
-
SSDEEP
6144:UrbOV3INiLFXf4TryvV4J24mWNxFMcFjbNJcmq9DrpSaG:obYIN4zI2tw/jbNHq9DrAaG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZOFRSwUXFUP5E8LYHIuJXZxpPXVUTYQPEINX8QAuVbt_BUWPMnQGKBTVDQs.dll
Files
-
KABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZOFRSwUXFUP5E8LYHIuJXZxpPXVUTYQPEINX8QAuVbt_BUWPMnQGKBTVDQs.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 542KB - Virtual size: 541KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ