Behavioral task
behavioral1
Sample
Cri2me09`s DinarBot (64 Bit).dll
Resource
win7-20231215-en
General
-
Target
7788120f6aea1e7602adfd472b0e7b83
-
Size
3.7MB
-
MD5
7788120f6aea1e7602adfd472b0e7b83
-
SHA1
ce10bcf6ad550cb0808b02a9ca0282c0a295c6fb
-
SHA256
e78a1f0dd3f07648042b610fa3af22d0117d0c0e4c4afca93f0a0164faaf53c5
-
SHA512
3d184d0ced7e3e097bd39384756e8927d60f5efa877feb895dd7607ced14fe1858bc63cc75253bed189e8e513a661cd55be028c816628472e7588ebe320f7beb
-
SSDEEP
98304:5h9T/59mUhn5WHeLuFjt9cCeUgcTWMeZ1Aj2WRy:5hl5thn5WKyx9ZgpM8ky
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Cri2me09`s DinarBot (64 Bit).dll themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Cri2me09`s DinarBot (64 Bit).dll
Files
-
7788120f6aea1e7602adfd472b0e7b83.rar
-
Cri2me09`s DinarBot (64 Bit).dll.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 18KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 556KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Cri2me09`s DinarBot (64 Bit).png.png
-
Cri2me09`s DinarBot (64 Bit).txt