HMQVXbfjn
Static task
static1
Behavioral task
behavioral1
Sample
49758b89ee0974e5ba1f8062c8d1352b3609af9b0e4b0a6b7dec97c9729a0447.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
49758b89ee0974e5ba1f8062c8d1352b3609af9b0e4b0a6b7dec97c9729a0447.dll
Resource
win10v2004-20230915-en
General
-
Target
49758b89ee0974e5ba1f8062c8d1352b3609af9b0e4b0a6b7dec97c9729a0447
-
Size
2.1MB
-
MD5
300991125c334109300020a47f69bc68
-
SHA1
2beae999372cbe5d3719c130f7adb52a130a9448
-
SHA256
49758b89ee0974e5ba1f8062c8d1352b3609af9b0e4b0a6b7dec97c9729a0447
-
SHA512
25cd1f0e9c3690669abd9f491da5b8af22e8182dd767e3bf3c026fcab2f8602a04a44538f1cbb4c4a83893757d952e89f73c1dc37d43dce90fa78f8a68764fe7
-
SSDEEP
49152:K1Eexs2mhz0T/yBYEc2xBnyN2M2MQXgLx7CrTqg2ei4OvggkIL4mXBpBbLvK8hcl:KrZ7CnqJt/v/kIL4H80
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49758b89ee0974e5ba1f8062c8d1352b3609af9b0e4b0a6b7dec97c9729a0447
Files
-
49758b89ee0974e5ba1f8062c8d1352b3609af9b0e4b0a6b7dec97c9729a0447.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 1.7MB
IMAGE_SCN_MEM_READ
data Size: 704KB - Virtual size: 704KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ