HHDNOACS
Static task
static1
Behavioral task
behavioral1
Sample
28c8cd91317dcff5b3da5dab6bae37dcb942759ed8799f109ed57cd630c8b39a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28c8cd91317dcff5b3da5dab6bae37dcb942759ed8799f109ed57cd630c8b39a.dll
Resource
win10v2004-20240412-en
General
-
Target
28c8cd91317dcff5b3da5dab6bae37dcb942759ed8799f109ed57cd630c8b39a
-
Size
38KB
-
MD5
48b97c3147d115706836a5de51ee2740
-
SHA1
41271dfe621d10af1bdd4be18259cbe759af0e4a
-
SHA256
28c8cd91317dcff5b3da5dab6bae37dcb942759ed8799f109ed57cd630c8b39a
-
SHA512
657e25363605bbfa95957405e44a6829eff2d5c958b9f7de75fbc77c70ae43026f01c92407cbbf1b03dddf79dd4152f9f53dc378ad3fd5b5b528daaa39a3e7bc
-
SSDEEP
768:h/1oOFQ34Zwfsih8Pr0Fv/+iY5C35jHA:h/OOFQoZEsZSY5o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28c8cd91317dcff5b3da5dab6bae37dcb942759ed8799f109ed57cd630c8b39a
Files
-
28c8cd91317dcff5b3da5dab6bae37dcb942759ed8799f109ed57cd630c8b39a.dll windows:4 windows x86 arch:x86
78817828e44fde11d06e092293ccdded
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ucscrt
Comp5_L2ToI32
Display_L5ToI32
I32ToUnsignedComp5_L4
IsNumericDisplay
GetDLLPtr
I32ToDisplayEbcdic
g_szCurrentModule
CheckVmod
g_dwCurrentLineNumber
msvcrt
_adjust_fdiv
malloc
_initterm
free
Exports
Exports
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ