Static task
static1
Behavioral task
behavioral1
Sample
DS4Windows.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
DS4Windows.exe
Resource
win10v2004-20230915-en
General
-
Target
DS4Windows.dll
-
Size
3.9MB
-
MD5
f81dc04f291ead0893eb6b1f1a37c4e9
-
SHA1
8e3ae34749f052f6b185c7e89a48ab55d15ac5b4
-
SHA256
9689b89b1e389781ad5d6d97657986ac93a6ef882879b9a94572218792d6154d
-
SHA512
a6ab0fbbb55322ae7d6a324164899915b078a5a2e2a4165e605243e9c6e351fe970a34a2cda3043185895230e80dfab61cc3a32d5fb41d84af6395651170d5ce
-
SSDEEP
49152:4LsDUcWROzImAnRBKFmW6eFo0y1Z9hev5CMsvlCeuYdPJzD4Hp3JzD2izmc:4LsDUclzImAw2uYJzkHtJziiz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DS4Windows.dll
Files
-
DS4Windows.dll.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 410KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ