RunWebHelper
Static task
static1
Behavioral task
behavioral1
Sample
ae3efb1b411272af7b33672451bd5826202a22670de9d45e924ee4f630694aad.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ae3efb1b411272af7b33672451bd5826202a22670de9d45e924ee4f630694aad.dll
Resource
win10v2004-20240226-en
General
-
Target
ae3efb1b411272af7b33672451bd5826202a22670de9d45e924ee4f630694aad
-
Size
988KB
-
MD5
9c1ef756d041773c4bbea023053137b6
-
SHA1
9aa542b974a7f4efb97032d9b41a3695b5c629c4
-
SHA256
ae3efb1b411272af7b33672451bd5826202a22670de9d45e924ee4f630694aad
-
SHA512
09db098308e88450f67a3c9d1d696417b7f02241879d85855d164280ed9a9596dcbe6a96d4f9bf0b473a6fbcb4d37f2681385d59b86a0dca987b8e002b80d277
-
SSDEEP
24576:yj3A8X9TeaAr64xW/9muOBCXMq8Xu/mjJk5YrbqIVZSySsL:CXct9xcouOsXMHXuMJZrbqIWy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae3efb1b411272af7b33672451bd5826202a22670de9d45e924ee4f630694aad
Files
-
ae3efb1b411272af7b33672451bd5826202a22670de9d45e924ee4f630694aad.dll windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 188KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mrxlllic Size: 780KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vvkzngdk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
-
-
.idata
-
.rsrc/2052/STRING/3841
-
.rsrc/2052/STRING/3842
-
.rsrc/2052/STRING/3843
-
.rsrc/2052/STRING/3857
-
.rsrc/2052/STRING/3858
-
.rsrc/2052/STRING/3859
-
.rsrc/2052/STRING/3865
-
.rsrc/2052/STRING/7
-
mrxlllic
-
vvkzngdk