Static task
static1
Behavioral task
behavioral1
Sample
awjia_ROV.dll.zip
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
awjia_ROV.dll.zip
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
awjia_ROV.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
awjia_ROV.dll
Resource
win10v2004-20230915-en
General
-
Target
awjia_ROV.dll.zip
-
Size
88KB
-
MD5
6d251aaeafb1bfdfa50fef6f027d1768
-
SHA1
e77f509bbfff86334269ffd13631cc4911e82ef2
-
SHA256
2294f92db9b6ebdd587aaba34a75ec1016535d608bf6a1008de4644d2a170687
-
SHA512
27cdb207ae11a0312e9ab9a5f4bc625aaec508056c282c5e6479c9d27f917e595debdd532bfd480ac30c2062921443d13a31e38ed84b48c9f8cfa9ca5cd8e795
-
SSDEEP
1536:7A70OpHFv5CaIPOrmFJ3FT6la+I8TDubABW23ZuWXoG01fRYaT5WhvWYOvSjlmDQ:070UlvAaIH+lIauUBp3GGiRPWRWzUYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/awjia_ROV.dll
Files
-
awjia_ROV.dll.zip.zip
-
awjia_ROV.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 219KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
checksums.txt