xnosEapRqjVGOtry
Static task
static1
Behavioral task
behavioral1
Sample
f40fec7bbcf13b6ad46b2a6aa7d5543f842adb9b17801250a6ad2a8e00194bab.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f40fec7bbcf13b6ad46b2a6aa7d5543f842adb9b17801250a6ad2a8e00194bab.dll
Resource
win10v2004-20231215-en
General
-
Target
f40fec7bbcf13b6ad46b2a6aa7d5543f842adb9b17801250a6ad2a8e00194bab
-
Size
1.1MB
-
MD5
1a4aa5a5de1fdea1308a97c99c8b6d64
-
SHA1
494d1b6c3d14c9940049d728ded8fbde6fc064d5
-
SHA256
f40fec7bbcf13b6ad46b2a6aa7d5543f842adb9b17801250a6ad2a8e00194bab
-
SHA512
6cc6910396bf7551442f3b3371c5b87618c0d5ae6afa18a7d693306826b1a8b9bce843136bdced704af2fb6cbdc640e747333021374e7b1707a3365aa017d258
-
SSDEEP
24576:1LTibD9P8rT21S6MYckrjZqIsN7g4F7rZr8Hxz5kWFiTT8Q:wD9P/Ah5G45KHxzO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f40fec7bbcf13b6ad46b2a6aa7d5543f842adb9b17801250a6ad2a8e00194bab
Files
-
f40fec7bbcf13b6ad46b2a6aa7d5543f842adb9b17801250a6ad2a8e00194bab.dll windows:4 windows x86 arch:x86
9aba9526e9e6625b7e6898e48273ac49
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
GlobalAlloc
GlobalFlags
WriteConsoleW
crypt32
CertDuplicateCRLContext
mmcndmgr
CreateExecutivePlatform
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
mshtml
GetWebPlatformObject
msxml6
DllGetActivationFactory
ntdll
RtlGetSaclSecurityDescriptor
ole32
CoRegisterSurrogate
HGLOBAL_UserSize
rasdlg
RasSrvIsConnectionConnected
rpcrt4
CStdStubBuffer_QueryInterface
version
GetFileVersionInfoSizeExW
GetFileVersionInfoW
Exports
Exports
Sections
.text Size: 604KB - Virtual size: 603KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 566KB - Virtual size: 566KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 48B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ