Static task
static1
Behavioral task
behavioral1
Sample
887108d44324470a539b12365948acbe3efa68c042b2ff0abf6d1bc56b350a59.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
887108d44324470a539b12365948acbe3efa68c042b2ff0abf6d1bc56b350a59.dll
Resource
win10v2004-20240226-en
General
-
Target
887108d44324470a539b12365948acbe3efa68c042b2ff0abf6d1bc56b350a59.dll
-
Size
789KB
-
MD5
3672a81eab6f275ee4c1c295095d72a2
-
SHA1
b446e0ec702147e7abb3072e4b8bb96c48f8ad3c
-
SHA256
887108d44324470a539b12365948acbe3efa68c042b2ff0abf6d1bc56b350a59
-
SHA512
831427ed4d806d41e7dde446449f4b3b61374b9f130bf51090b635d0d89ef6a91146cf3a58620c880079361002699f774a71ff8b0dbafbb244dba5b71591bb74
-
SSDEEP
24576:eMNvnutxQoksa1t0fQqcdfmGbck5WpOknFby:eMB0xZksaKcdf9bfWJRy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 887108d44324470a539b12365948acbe3efa68c042b2ff0abf6d1bc56b350a59.dll
Files
-
887108d44324470a539b12365948acbe3efa68c042b2ff0abf6d1bc56b350a59.dll.dll windows:6 windows x86 arch:x86
0a63182905d4cb67d3f1698721e3b052
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
OpenProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
advapi32
CreateProcessAsUserA
ws2_32
send
iphlpapi
GetAdaptersInfo
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 531KB - Virtual size: 531KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c0 Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c1 Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ