crInstallW
Static task
static1
Behavioral task
behavioral1
Sample
5e6091fb14018bcac34c9c0d17ff645203c02797aea19d956d63e9c16547420f.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5e6091fb14018bcac34c9c0d17ff645203c02797aea19d956d63e9c16547420f.dll
Resource
win10v2004-20230915-en
General
-
Target
5e6091fb14018bcac34c9c0d17ff645203c02797aea19d956d63e9c16547420f
-
Size
1.7MB
-
MD5
9b00e1a73bd0c2c8c02e2ab08d67f4af
-
SHA1
2ffc143ba1494150fb217c6e0d63c708eafd9911
-
SHA256
5e6091fb14018bcac34c9c0d17ff645203c02797aea19d956d63e9c16547420f
-
SHA512
826beaece7db4154df436fb01d979a541729b44b38411fdcca0a5c1871e56498510a8822588982bf0c647e964ca81ea06669d5e584ec227c3bb62c1f284784ce
-
SSDEEP
49152:eA5Vq0haiA/nAjkdDtH8nQEezcMXQv4ZAqscZ2l8YGahe:euMaAIEtH8QEaXQv47scMAa4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e6091fb14018bcac34c9c0d17ff645203c02797aea19d956d63e9c16547420f
Files
-
5e6091fb14018bcac34c9c0d17ff645203c02797aea19d956d63e9c16547420f.dll windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
NJCU0FTQ Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PZMFSv8K Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
JyWYmDcD Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZcfuxJuN Size: 939B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TAz9M18I Size: 77B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
eHto9lqR Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Mk0rUmpG Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ