XY
Static task
static1
Behavioral task
behavioral1
Sample
2930d4964fc0431dcf16a9e7ccb43e9bb7238f6a48e31183034fddfbe9282b90.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2930d4964fc0431dcf16a9e7ccb43e9bb7238f6a48e31183034fddfbe9282b90.dll
Resource
win10v2004-20231215-en
General
-
Target
2930d4964fc0431dcf16a9e7ccb43e9bb7238f6a48e31183034fddfbe9282b90
-
Size
282KB
-
MD5
da4e0cc2590be2ff9120a4c0167114c2
-
SHA1
25c61f4d7558d0549200c4cafd3bef38afae8ca4
-
SHA256
2930d4964fc0431dcf16a9e7ccb43e9bb7238f6a48e31183034fddfbe9282b90
-
SHA512
8db36cee1824e08619a5e26f10f0a4c555a3dd02c342b48898c2eef7e51a84af92c3197c8c601e28a50b068284b5ccd00b14f8cd9ad28baeba9bb0e13dee9118
-
SSDEEP
6144:1PjQrvAQc/AhLnsRrxu0lxxSkpY4c0Xyak6KQub6o0bc1h/p0N8Gvs:1bQdnsLuU/dY4ctLQu30ex+N8G0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2930d4964fc0431dcf16a9e7ccb43e9bb7238f6a48e31183034fddfbe9282b90
Files
-
2930d4964fc0431dcf16a9e7ccb43e9bb7238f6a48e31183034fddfbe9282b90.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 18.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE