Static task
static1
Behavioral task
behavioral1
Sample
b86581f3e25fe914180467a5819083cb.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b86581f3e25fe914180467a5819083cb.dll
Resource
win10v2004-20240226-en
General
-
Target
b86581f3e25fe914180467a5819083cb
-
Size
879KB
-
MD5
b86581f3e25fe914180467a5819083cb
-
SHA1
ca9cfcc571d0a9e600bbb70f3f278e69c747d540
-
SHA256
ac67360740fe279f59179f19f39030d6b284820ad00b21b326541960788b54c3
-
SHA512
4bcc4369c37d5d6a1d979adf486b71a25bd47887d605063c757aa735385bafd41612a4e90b7d9bc871977716b73827944b46ce7f39bc99fb2de24bd09fa459b2
-
SSDEEP
24576:nuXCqs+tiixmwMgvUT7YWBHHpq36NWkzbIaUlpjye/WGArUiwz7SrRN:7+4Zgv6kyhNL3yTuGyTwH8RN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b86581f3e25fe914180467a5819083cb
Files
-
b86581f3e25fe914180467a5819083cb.dll windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 154KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tzazgmbr Size: 658KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wsdbzear Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE