MirSend
Static task
static1
Behavioral task
behavioral1
Sample
3dd5ae9dbd9c3b3440a7752149c4fe411429a6b5bb524214a95a553330d6c6ee.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3dd5ae9dbd9c3b3440a7752149c4fe411429a6b5bb524214a95a553330d6c6ee.dll
Resource
win10v2004-20240508-en
General
-
Target
3dd5ae9dbd9c3b3440a7752149c4fe411429a6b5bb524214a95a553330d6c6ee
-
Size
375KB
-
MD5
29fc352c068febd30615ffe4312e599e
-
SHA1
f2abeb54ef6e7985578f89a98fcb3960e96b7b10
-
SHA256
3dd5ae9dbd9c3b3440a7752149c4fe411429a6b5bb524214a95a553330d6c6ee
-
SHA512
16d0310c35dc71673c7e9cf882b3576e329e2300b77cd3928a176b3a7a3e0a2c8427660044721e9127be22a55eee1f27801be72dc7742c8a8fcadb95116eaa17
-
SSDEEP
6144:xG4OrS/5NVmgnFu9204Xpk2JfcnQattotUPbEZfdY2T+yFQOSv5X7CwTFGbA:s4NxFS2dcn74UPYxOCQJMoFGbA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dd5ae9dbd9c3b3440a7752149c4fe411429a6b5bb524214a95a553330d6c6ee
Files
-
3dd5ae9dbd9c3b3440a7752149c4fe411429a6b5bb524214a95a553330d6c6ee.dll windows:4 windows x86 arch:x86
b6efdee7a30cbaf6f196d48f2d41a291
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SafeArrayCreate
advapi32
RegCloseKey
user32
DestroyIcon
kernel32
Sleep
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
gdi32
CreateHalftonePalette
version
GetFileVersionInfoSizeA
shell32
ShellExecuteA
comctl32
ImageList_Read
Exports
Exports
Sections
.text Size: - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 19KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 73B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 367KB - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ