Static task
static1
Behavioral task
behavioral1
Sample
RegisterAndLog.dll
Resource
win11-20240221-en
General
-
Target
RegisterAndLog.dll
-
Size
1.1MB
-
MD5
48934ae2a262d7f0fa8a76c23498d869
-
SHA1
1dc1edc4b5a77fe0bd890f1e237afb487b22112e
-
SHA256
c30cd46ec64e7883af25007e10a14acdc23f97e572c5b33b4706a25c3044fdb2
-
SHA512
fad7aa2a979c87b4ba3fb0312876d0810a4acbc3a6d6d702c04620a24723c2da15cac1a51fbaa10b4ef37897e9f4a264d1453ed4556fbc1518bab9acab3999de
-
SSDEEP
24576:d7XXI23DmwBrECCqLSgbstYbgsdXXrmsnqgvyU4FH1B+AtHSU2m0WwwoFIyyqn9S:dB3DzlECCqdbstYbgsdXXrmsnqgvyU42
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RegisterAndLog.dll
Files
-
RegisterAndLog.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
~ z1k"! Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1005KB - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ