Static task
static1
Behavioral task
behavioral1
Sample
sypbdjojrgpthq.dll.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
sypbdjojrgpthq.dll.exe
Resource
win10v2004-20231215-en
General
-
Target
sypbdjojrgpthq.dll.exe
-
Size
225KB
-
MD5
590b95aae98615105cd020a531520b29
-
SHA1
b24c6e1368255f30eab286cebde47d56b1cd781d
-
SHA256
8ec4a944f9be73731c55274731bfb2a1fefe13cb6a4c688d013104467aabe170
-
SHA512
00a298235e20c7dc781adf35ce083ce7fc45dc8a8b8ebf962e20941951026e39d73d63b472cb7c12fa8997806f1b0d43e3e47550c22ea8de28be5f3907f5d265
-
SSDEEP
6144:CVgSmiDZ4HNnB0JqqVFMg+ARFrSYpTp3smzyQc:kFmzHhd0qYpTp33OQc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sypbdjojrgpthq.dll.exe
Files
-
sypbdjojrgpthq.dll.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 222KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ