DllMain
Static task
static1
Behavioral task
behavioral1
Sample
b2fe3e953f3e404502d964bd1c50338c00216bff8e4345bb938b24c45e2148cf.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b2fe3e953f3e404502d964bd1c50338c00216bff8e4345bb938b24c45e2148cf.dll
Resource
win10v2004-20230915-en
General
-
Target
b2fe3e953f3e404502d964bd1c50338c00216bff8e4345bb938b24c45e2148cf
-
Size
8.6MB
-
MD5
b819694c5ad6c53d7db1ab3884d1606e
-
SHA1
ea0abeecd470bda3bd2607e4930600111f8dfd12
-
SHA256
b2fe3e953f3e404502d964bd1c50338c00216bff8e4345bb938b24c45e2148cf
-
SHA512
d39131eec7f7719c36340898006b5cd341e881c5e101e77db46b63928ffca9418eb8c852521fcbbc384df9cb64bc3b987e01b7554e53b5a76a2b93dabb1bf162
-
SSDEEP
196608:iWXCdBJwYwip4U+9mkGjTz295eQBM5hQFWU9vdsEGMsAJq:DXnYwiqd97IzAe0uTUsEGuJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2fe3e953f3e404502d964bd1c50338c00216bff8e4345bb938b24c45e2148cf
Files
-
b2fe3e953f3e404502d964bd1c50338c00216bff8e4345bb938b24c45e2148cf.dll windows:6 windows x64
7d29e37829c452f55a02c3c8f22f3ff2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
SizeofResource
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
MsgWaitForMultipleObjects
CharUpperBuffW
gdi32
SelectObject
advapi32
OpenServiceA
shell32
SHGetSpecialFolderPathW
ole32
CreateStreamOnHGlobal
oleaut32
SystemTimeToVariantTime
comctl32
ImageList_Destroy
psapi
GetMappedFileNameW
gdiplus
GdipCreateBitmapFromScan0
ws2_32
recv
Exports
Exports
Sections
.text Size: - Virtual size: 866KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.V8# Size: - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.m$. Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.b5` Size: 8.6MB - Virtual size: 8.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ