OodIrssdul
Static task
static1
Behavioral task
behavioral1
Sample
f75b0fc647b7f0a05d07ec3fe7b8880d6099074151e889108eff670a4dc675c2.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f75b0fc647b7f0a05d07ec3fe7b8880d6099074151e889108eff670a4dc675c2.dll
Resource
win10-20231020-en
General
-
Target
f75b0fc647b7f0a05d07ec3fe7b8880d6099074151e889108eff670a4dc675c2
-
Size
3.0MB
-
MD5
3a750b231ca7d49b77a2811578e223ac
-
SHA1
dbf0520ff8919405d4ffaa620dfce2db63e56367
-
SHA256
f75b0fc647b7f0a05d07ec3fe7b8880d6099074151e889108eff670a4dc675c2
-
SHA512
05751db3d113250df57bcf99dae3fe2b04737adfd29384caf17002fcbd272aca85675fb33a25083315fb0f4f2c5524f6c425c3f42f1afc7eceda154aa54578d9
-
SSDEEP
49152:CbByCKGz9QS6YqudV2o8Hz/rq/oxyliPgHT+jMK9WtwaC6ypesEpF3N5nfyDPJPN:qKNS6YFjGOooA4z+jMK90Y3eF3bnKDPz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f75b0fc647b7f0a05d07ec3fe7b8880d6099074151e889108eff670a4dc675c2
Files
-
f75b0fc647b7f0a05d07ec3fe7b8880d6099074151e889108eff670a4dc675c2.dll windows:5 windows x86 arch:x86
ffc81639cc06a3e6c8f2d36aef21683c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
OpenProcessToken
SetSecurityDescriptorDacl
setupapi
SetupSetFileQueueAlternatePlatformW
user32
GetSystemMenu
DrawEdge
IsCharAlphaNumericW
VkKeyScanExA
msvcrt
memset
gdi32
SetICMMode
kernel32
GetSystemTimeAdjustment
GlobalMemoryStatus
MulDiv
GlobalAlloc
PrepareTape
GetTimeZoneInformation
LoadLibraryExA
EraseTape
GetSystemDefaultLangID
GetModuleFileNameW
GetBinaryTypeW
GetModuleFileNameA
LoadLibraryW
Exports
Exports
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ