Static task
static1
Behavioral task
behavioral1
Sample
9d43844779144f58b2245d442794ab9355be3e05406777be8895083b229ba770.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9d43844779144f58b2245d442794ab9355be3e05406777be8895083b229ba770.dll
Resource
win10v2004-20230915-en
General
-
Target
4e360fb9567c27f779df85ac91681e63.bin
-
Size
213KB
-
MD5
80e91917af8cf40f0b91ba6c7e386e2d
-
SHA1
6f9ae02ef9d3346a42274002f9e891225df5f75c
-
SHA256
6979fadbfdaac0cc5556cfe2d2c0099d082eab933b350ea39fea76e31a0e725c
-
SHA512
37ffa338073e54ffc161d9589a6844d4d09d8bf1418f9af958c1079a8734f264d1cf0f4b265784d67ff79a2c956dfd18f7c29cea30597d4fa71c9d6b9f308ad2
-
SSDEEP
6144:ahDPEW/a/bvAiAA+YgekxlFvIq0Y3xAlC1FNGnOuDkyBHs:aNzyzf+YQXIq0sa89wdBM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9d43844779144f58b2245d442794ab9355be3e05406777be8895083b229ba770.dll
Files
-
4e360fb9567c27f779df85ac91681e63.bin.zip
Password: infected
-
9d43844779144f58b2245d442794ab9355be3e05406777be8895083b229ba770.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 657KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ