ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
24f6511b18698a27091b2ef61ad1ead9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
24f6511b18698a27091b2ef61ad1ead9.dll
Resource
win10v2004-20231222-en
General
-
Target
24f6511b18698a27091b2ef61ad1ead9
-
Size
242KB
-
MD5
24f6511b18698a27091b2ef61ad1ead9
-
SHA1
8d3023cd25b4b948066268f477684716f9d54912
-
SHA256
a7b8d5b70e5c9c437db7c934e9c73fe4957483b434fd23b3b5574d41fd2568c4
-
SHA512
c06a91893f8eb2fa2b0ae8cf802c8a90d859e11c4b6251f792ea28eeea5fd2ca96fe5ea7bc27efe93bc1400ee0130acc5db27062be5b69c167ab1c7f8c47dc9c
-
SSDEEP
6144:iqTrec3n327nq5Ka+WmbV7I+Caq7HMCtJXPp:iqeoGO5KmmJ9bkMCtJXR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24f6511b18698a27091b2ef61ad1ead9
Files
-
24f6511b18698a27091b2ef61ad1ead9.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.ziyue! Size: - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.373250 Size: 241KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE