IhzpheuldS
Static task
static1
Behavioral task
behavioral1
Sample
48a057f11e0aff02866a70d47f23ea467fe654b3dc5c625a0044d501d70948a8.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
48a057f11e0aff02866a70d47f23ea467fe654b3dc5c625a0044d501d70948a8.dll
Resource
win10v2004-20240426-en
General
-
Target
48a057f11e0aff02866a70d47f23ea467fe654b3dc5c625a0044d501d70948a8
-
Size
2.6MB
-
MD5
99a25ef25de3377b4b165eff4417172f
-
SHA1
07ca4dae2086682d422ef06ee60cecb7a0e06286
-
SHA256
48a057f11e0aff02866a70d47f23ea467fe654b3dc5c625a0044d501d70948a8
-
SHA512
cc4287413a0933aa26094848dd43d00ccf058906cf0d6c4c86715577f9066920d7ae4b50da269415bed7b95dbb2586097bb62f72e84ca16d4957749f57863ea9
-
SSDEEP
49152:hUjlYK/449J6SA22lTU+P7Fv+6Q+gMSPb77RgLaJ4WIEKKp7D0ed:olfb9mrlT1P5v+X+8z+LaJ4BEtVoe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48a057f11e0aff02866a70d47f23ea467fe654b3dc5c625a0044d501d70948a8
Files
-
48a057f11e0aff02866a70d47f23ea467fe654b3dc5c625a0044d501d70948a8.dll windows:5 windows x86 arch:x86
e44d8197760d0a5abc943226e457fbf9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
rpcrt4
RpcServerListen
winspool.drv
OpenPrinterW
advapi32
QueryServiceStatus
ole32
CoRegisterMessageFilter
kernel32
WaitForSingleObjectEx
GetFileSize
GetModuleFileNameA
DeleteCriticalSection
GetBinaryTypeA
GetModuleHandleA
opengl32
glMap1f
winmm
waveInOpen
Exports
Exports
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 84KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ