Static task
static1
Behavioral task
behavioral1
Sample
0524d37954ffff414cd5fb4534088349.dll
Resource
win7-20231215-en
General
-
Target
0524d37954ffff414cd5fb4534088349
-
Size
89KB
-
MD5
0524d37954ffff414cd5fb4534088349
-
SHA1
0cb8563782d9f0983b259b1b40eecc96c24ad5ff
-
SHA256
c572fa7d8ccd8d992b5e8cd26e0d71bbd6d9edc8dc18de0876f58521fceee096
-
SHA512
6a8f9e7ef2143f5803a05bc4e75693e99eba3375556754c454fc859c7665fa50368e0a660729e1b90a94dcdeaf2be86e22786995965aeea5f9977dd57a48d0ca
-
SSDEEP
1536:xfCSfjPtdePtnmSzLF0CHOInxvYn1BWj0FEvAM0Mj+K4C8Anpk:xfVfjMmMRv7WGjGAnK
Malware Config
Signatures
Files
-
0524d37954ffff414cd5fb4534088349.dll regsvr32 windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Code Sign
02Certificate
IssuerCN=Microsoft Corp,OU=Authority,O=Microsoft,L=Richmond,ST=VA,C=US,1.2.840.113549.1.9.1=#0c1862696c6c2e6761746573406d6963726f736f66742e636f6dNot Before05-03-2008 16:49Not After03-03-2018 16:49SubjectCN=Adobe Systems Incorporated,OU=CodeSigning,O=Microsoft,ST=VA,C=US,1.2.840.113549.1.9.1=#0c1862696c6c2e6761746573406d6963726f736f66742e636f6d4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before17-05-2005 00:00Not After16-05-2010 23:59SubjectCN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 76KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE