Static task
static1
Behavioral task
behavioral1
Sample
ZABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZnLQoMHESxbXTSfGGMUYvgO6PGLUyXYXSZEIGlDEkDaFAWbnHa8X4yOSKfMP.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ZABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZnLQoMHESxbXTSfGGMUYvgO6PGLUyXYXSZEIGlDEkDaFAWbnHa8X4yOSKfMP.dll
Resource
win10v2004-20230915-en
General
-
Target
ZABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZnLQoMHESxbXTSfGGMUYvgO6PGLUyXYXSZEIGlDEkDaFAWbnHa8X4yOSKfMP.dll
-
Size
659KB
-
MD5
4e360fb9567c27f779df85ac91681e63
-
SHA1
a70a036752961d50d944ea325e92e6f765b64c85
-
SHA256
9d43844779144f58b2245d442794ab9355be3e05406777be8895083b229ba770
-
SHA512
3854ebccb9d70c8dca2b990087c8538a72113fbd75c0c25b4837575818befc9c74b85d039e1ffa13c374c25018ab38773d70c839cff5ac48b896e8e5c95a8a7a
-
SSDEEP
12288:sw/KuHP85Ttsz//nsYcbf1T3QnFTFhI5:tvzXXSoFJ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ZABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZnLQoMHESxbXTSfGGMUYvgO6PGLUyXYXSZEIGlDEkDaFAWbnHa8X4yOSKfMP.dll
Files
-
ZABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZnLQoMHESxbXTSfGGMUYvgO6PGLUyXYXSZEIGlDEkDaFAWbnHa8X4yOSKfMP.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 657KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ