COMPONENT.KEY
Static task
static1
Behavioral task
behavioral1
Sample
81ac448f0bc912d4664fce1c486d601e57bb9cdbb8c277e3a2894330e349e1c0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
81ac448f0bc912d4664fce1c486d601e57bb9cdbb8c277e3a2894330e349e1c0.dll
Resource
win10v2004-20230915-en
General
-
Target
81ac448f0bc912d4664fce1c486d601e57bb9cdbb8c277e3a2894330e349e1c0
-
Size
107KB
-
MD5
fe4a2208adf5de23295a81549c643082
-
SHA1
e6fcf00a9e1b3e372be70835a8c75333f1b77811
-
SHA256
81ac448f0bc912d4664fce1c486d601e57bb9cdbb8c277e3a2894330e349e1c0
-
SHA512
ba83779a4dfc1c5bb2889d945635e7ab55452b29e7bc3b6a31b2fe4df539791ca5680316e1b1ea4d1c6ebdd939e50bc303ad1deadd31567cd14f66d6ca699bbb
-
SSDEEP
1536:sbL0SOfsBA5AXj1Z5irfuWIRe8hlntMsi2GGedPaUeLRk82xNGScgmzV:60tsW5AXjFBWjylntMsiuKAL3uQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81ac448f0bc912d4664fce1c486d601e57bb9cdbb8c277e3a2894330e349e1c0
Files
-
81ac448f0bc912d4664fce1c486d601e57bb9cdbb8c277e3a2894330e349e1c0.dll windows:1 windows x86
359e317a7cf6e9cef0175b00d5a2f976
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
advapi32
ReportEventA
RegisterEventSourceA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
DeregisterEventSource
kernel32
WriteFile
LoadLibraryA
HeapReAlloc
HeapFree
HeapAlloc
GetStdHandle
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
FindFirstFileA
FindClose
ExitProcess
DisableThreadLibraryCalls
user32
wvsprintfA
MessageBoxA
Exports
Exports
Sections
.text Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jidata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jedata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.config Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ