latrodectus | update_2ffaca76[.]dll

General

Target
update_2ffaca76.dll
Size 69KB
Sample240402-ya9bdabd46
SHA256 65da6d9f781ff5fc2865b8850cfa64993b36f00151387fdce25859781c1eb711
MD5 0ad82a3b229420b4cf52959f85cba82d
SHA1 f59bb505d1ed4a7492c41195f19e99f1d568ef95
SHA512 f428a42ee393c813eef5a6a8dc19bef50f89ff0b7017fe204f6f85bf6305df257012ab1dd2aff977c71fe34c734d478df875d9d6229aa230c98160fc016851ad
SSDEEP 768:RDrkZkx7jOxAi0IIO99dKJKbATQVuyQw4n4mjlQmLvniWiMfDeDvCPdN:RD1dj1pO9CJKoQF4n4mjltqTMKD
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detect larodectus Loader variant 2 1 IoCs

loader

resource	yara_rule
sample	family_latrodectus_v2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
update_2ffaca76.dll

IMPHASH ecb712bfe0d1558ffce8f8c2df526278
SHA256 65da6d9f781ff5fc2865b8850cfa64993b36f00151387fdce25859781c1eb711
MD5 0ad82a3b229420b4cf52959f85cba82d
SHA1 f59bb505d1ed4a7492c41195f19e99f1d568ef95
SHA512 f428a42ee393c813eef5a6a8dc19bef50f89ff0b7017fe204f6f85bf6305df257012ab1dd2aff977c71fe34c734d478df875d9d6229aa230c98160fc016851ad
SSDEEP 768:RDrkZkx7jOxAi0IIO99dKJKbATQVuyQw4n4mjlQmLvniWiMfDeDvCPdN:RD1dj1pO9CJKoQF4n4mjltqTMKD
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

6

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths