ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
39C4DE564352D7B6390BFD50B28AA9461C93FB32.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39C4DE564352D7B6390BFD50B28AA9461C93FB32.dll
Resource
win10v2004-20231215-en
General
-
Target
39C4DE564352D7B6390BFD50B28AA9461C93FB32
-
Size
314KB
-
MD5
30c9a961e748856444d38891bad730ec
-
SHA1
39c4de564352d7b6390bfd50b28aa9461c93fb32
-
SHA256
9cb6c80e588a6f8c3e31b392f496b51ed5022d93029d5aae1954dbe80d12c80a
-
SHA512
603f7b7507da23ab91ba18271185f1d344a3d70695bd0bdab701165e2aa7ed8e1c78b67d8568c104c87dd800a612f4e9bd03fa04dfe11e85e0a5752c4972d14b
-
SSDEEP
6144:I99sCNAG/VTRkdHA/EoyU15MZ4MSnCFRxx2qstiDcp0pm4AmAxkN3F:InAWvy2t/MmqlQwDcp00rHxkP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39C4DE564352D7B6390BFD50B28AA9461C93FB32
Files
-
39C4DE564352D7B6390BFD50B28AA9461C93FB32.dll windows:5 windows x64 arch:x64
c74b867b863a7f5c6541ac54fa5ae17d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegOpenKeyW
ws2_32
recv
user32
MessageBoxW
Exports
Exports
Sections
.MPRESS1 Size: 310KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE