Static task
static1
Behavioral task
behavioral1
Sample
6e4434e1e24599d384b0a1c4f2ab958c4d72fc7c2aa8a959d8987b39685620ff.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e4434e1e24599d384b0a1c4f2ab958c4d72fc7c2aa8a959d8987b39685620ff.dll
Resource
win10v2004-20231215-en
General
-
Target
6e4434e1e24599d384b0a1c4f2ab958c4d72fc7c2aa8a959d8987b39685620ff
-
Size
11.3MB
-
MD5
1c8939ba6da7a93e5759955ff6ce2a9d
-
SHA1
ed9ea31c8c858b28702894c2aa87b345d3817005
-
SHA256
6e4434e1e24599d384b0a1c4f2ab958c4d72fc7c2aa8a959d8987b39685620ff
-
SHA512
a4c8337dbf3d47c93e5641e808353206d0082d9a7b5df0dfce074f55b9a2d79407d58ad2e6786a10d3b9c297feb139e0ffe70fcc27fcf68032d04142afc2bbcc
-
SSDEEP
196608:EfJ0F5aWDtp4OrNDweIJygTfiCBA/4OT1QO28XLELK8t:/aAtp4AFwcOi/gOT1QO28XLEu8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e4434e1e24599d384b0a1c4f2ab958c4d72fc7c2aa8a959d8987b39685620ff
Files
-
6e4434e1e24599d384b0a1c4f2ab958c4d72fc7c2aa8a959d8987b39685620ff.dll windows:6 windows x86 arch:x86
31ad820907ecc3addbd73f90fd4b103b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualFree
user32
IsWindow
shlwapi
PathFileExistsW
version
GetFileVersionInfoSizeW
ws2_32
gethostbyname
advapi32
RegisterEventSourceA
Sections
.text Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.1Q4 Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.h,R Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.}w. Size: 11.3MB - Virtual size: 11.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ