CreateExecutivePlatform
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
55f53b1d9dac903d695b48f52894117a87acd81c1c10fc6eafb6dad5d6bc28b4.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
55f53b1d9dac903d695b48f52894117a87acd81c1c10fc6eafb6dad5d6bc28b4.dll
Resource
win10v2004-20240319-en
Target
55f53b1d9dac903d695b48f52894117a87acd81c1c10fc6eafb6dad5d6bc28b4.zip
Size
70KB
MD5
08168f7c5b4eea684ef697e91858b639
SHA1
92360b97031b2254ef9d03898a7739e1d7c60b64
SHA256
0e563364aa5e690f1241f05eeed1718e1514aed3b32062e3be9b7dcc82c378bd
SHA512
e48b57e4bd8c24868dfdc75887f2a8a0f05a4e4edade434236a3d6ca034b233ce8ef726a8caaa58fa15e13cdd4757bf7f1b120ae8f0dacfabe61c97ec7babc61
SSDEEP
1536:hgZZRKNFED3ABi30KH33V0E7FhG19QsUsvxJ:+ZZRUFQ3AB808H+gmQ8J
dridex
22201
104.36.167.47:443
188.40.48.93:4664
162.241.33.132:9217
217.160.5.104:593
Processes:
resource | yara_rule |
---|---|
static1/unpack001/55f53b1d9dac903d695b48f52894117a87acd81c1c10fc6eafb6dad5d6bc28b4.dll | dridex_ldr |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/55f53b1d9dac903d695b48f52894117a87acd81c1c10fc6eafb6dad5d6bc28b4.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LCMapStringA
IsBadReadPtr
HeapValidate
GetStringTypeA
GetStartupInfoA
GetLocaleInfoA
LoadLibraryA
GetConsoleOutputCP
FreeEnvironmentStringsA
FlushFileBuffers
DebugBreak
CreateFileA
GetLastError
GetEnvironmentStrings
OutputDebugStringA
MessageBoxW
GetUserNameW
CreateExecutivePlatform
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ