DllMain
Static task
static1
Behavioral task
behavioral1
Sample
9600afafe8c9c6037586ad06e4e2315cc0f4cc4537ea478c5a5b9875c46bda13.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9600afafe8c9c6037586ad06e4e2315cc0f4cc4537ea478c5a5b9875c46bda13.dll
Resource
win10v2004-20230915-en
General
-
Target
9600afafe8c9c6037586ad06e4e2315cc0f4cc4537ea478c5a5b9875c46bda13
-
Size
8.6MB
-
MD5
eab88750ce608be471b38aa171d4d48e
-
SHA1
eefcd8bc06e3adf0c90659d062aa92babc53851a
-
SHA256
9600afafe8c9c6037586ad06e4e2315cc0f4cc4537ea478c5a5b9875c46bda13
-
SHA512
17a8bf956dc789f2f653f50396d8d44d49db7f73bb1f8d9d563f7665e5a349b7be993c5cacd635c40a228a59c280e862de2115e058b840a8053174c2d2a615bb
-
SSDEEP
196608:Rz9B6nD1lnc+h4xNy9PIoyZNnjv9QIIG9:fSnc+hwy8d/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9600afafe8c9c6037586ad06e4e2315cc0f4cc4537ea478c5a5b9875c46bda13
Files
-
9600afafe8c9c6037586ad06e4e2315cc0f4cc4537ea478c5a5b9875c46bda13.dll windows:6 windows x64
7d29e37829c452f55a02c3c8f22f3ff2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
SizeofResource
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
MsgWaitForMultipleObjects
CharUpperBuffW
gdi32
SelectObject
advapi32
OpenServiceA
shell32
SHGetSpecialFolderPathW
ole32
CreateStreamOnHGlobal
oleaut32
SystemTimeToVariantTime
comctl32
ImageList_Destroy
psapi
GetMappedFileNameW
gdiplus
GdipCreateBitmapFromScan0
ws2_32
recv
Exports
Exports
Sections
.text Size: - Virtual size: 884KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.*c* Size: - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d+, Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.A%z Size: 8.6MB - Virtual size: 8.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 220B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ