Static task
static1
Behavioral task
behavioral1
Sample
8011b7d433e9ba906000118f879a1a42.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8011b7d433e9ba906000118f879a1a42.dll
Resource
win10v2004-20231215-en
General
-
Target
8011b7d433e9ba906000118f879a1a42
-
Size
381KB
-
MD5
8011b7d433e9ba906000118f879a1a42
-
SHA1
7306250debb0bb1f65bdc2b35dd76bca25ffa4b5
-
SHA256
61ef1c4e1c871f34d33472a02b5063f91ec47a3807a3d2bc8cd5552298ea0a58
-
SHA512
847aca30d027c91302687bb551bbe4d619862b31303b271c83e1dda0be14d1eb7d4b1500e3e9bc7c57262c1856b16ac4eef9e28cd582a80bc5873892fb679430
-
SSDEEP
6144:TPQHr1KZjY5VNMvCi+yButexo7dbnwrohLQlmscelTcdNqoRZdoX5Jp2mE+6s7vr:TPQHr1ujY5bMvCip7xo7ZwshLQlmscO9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8011b7d433e9ba906000118f879a1a42
Files
-
8011b7d433e9ba906000118f879a1a42.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
xiaohui0 Size: - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui1 Size: 380KB - Virtual size: 385KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE