Nbhasjyfuashfjkjashf
Static task
static1
Behavioral task
behavioral1
Sample
f7e374a58c6cf08108d81efc4253a1d724f04bd2e9f1d2dfba7879a2178a0d26.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f7e374a58c6cf08108d81efc4253a1d724f04bd2e9f1d2dfba7879a2178a0d26.dll
Resource
win10v2004-20240412-en
General
-
Target
628c03c7f48d64ed9b2f79eb407a2931d9f6f627cf905b6a4d5342d6994e1841
-
Size
35KB
-
MD5
d5969bc5851e4851594e15be8b9f7b0d
-
SHA1
2813018be763a467dd37c5fd82a9aafb13e69363
-
SHA256
628c03c7f48d64ed9b2f79eb407a2931d9f6f627cf905b6a4d5342d6994e1841
-
SHA512
87512a1abad5f285c1972a887c0bbb3359a978685671299d18d4cefb6dfd7ddafd94faaa74be7e2752d367efbd626d5f554f49823bb6fe58cbdf25f900ca53d8
-
SSDEEP
768:rL65DUH+90+jRYWriTfutMXFdiWMaGxiIJfo4iChdmHAlt:rL6+Ho0+j/W6GdiD50moTmkHAlt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/f7e374a58c6cf08108d81efc4253a1d724f04bd2e9f1d2dfba7879a2178a0d26
Files
-
628c03c7f48d64ed9b2f79eb407a2931d9f6f627cf905b6a4d5342d6994e1841.zip
Password: infected
-
f7e374a58c6cf08108d81efc4253a1d724f04bd2e9f1d2dfba7879a2178a0d26.dll windows:6 windows x64 arch:x64
7c773e532aaf19a45d9dc6db063d0df0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
shlwapi
StrChrIA
StrChrIW
StrChrNIW
StrCmpNIA
StrDupW
StrIsIntlEqualA
StrPBrkA
StrRChrW
StrRChrIA
StrCmpW
StrCmpIW
StrCatChainW
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.typ Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ