CktKpswBDH
Static task
static1
Behavioral task
behavioral1
Sample
aa79c2cb0bf927159301d8514684b19133c7dcb488d2eab82e6b9a3ffd8e970f.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
aa79c2cb0bf927159301d8514684b19133c7dcb488d2eab82e6b9a3ffd8e970f.dll
Resource
win10v2004-20230915-en
General
-
Target
aa79c2cb0bf927159301d8514684b19133c7dcb488d2eab82e6b9a3ffd8e970f
-
Size
2.0MB
-
MD5
f4c1a3f7bdb36c8d0cf7c985a63fc046
-
SHA1
5952f64fe8b1a4c90bfaf00f007bea29ade8ecbf
-
SHA256
aa79c2cb0bf927159301d8514684b19133c7dcb488d2eab82e6b9a3ffd8e970f
-
SHA512
756cde0595cb3ba1aeca1a30414652c1da994ae37e0e9893e3316dfd3510ca2af1ee9d72a6034fc293780cd5b887d1a5e4c7e3e355bbbc1a27ae02819913fc05
-
SSDEEP
49152:21EexWQArBiT/yjWKO4r3RkD4aIm6lCFm2FWzyZ4iqR/4OTzM9R/l+4w8VhFtxXh:+jS2iy/OTw9jDXd7QCN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa79c2cb0bf927159301d8514684b19133c7dcb488d2eab82e6b9a3ffd8e970f
Files
-
aa79c2cb0bf927159301d8514684b19133c7dcb488d2eab82e6b9a3ffd8e970f.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 1.8MB
IMAGE_SCN_MEM_READ
king Size: 704KB - Virtual size: 704KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
king Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
king Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
king Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
king Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ