Static task
static1
Behavioral task
behavioral1
Sample
Xparts.QPYun.Service.MobileAssistant.Controller.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Xparts.QPYun.Service.MobileAssistant.Controller.dll
Resource
win10v2004-20240426-en
General
-
Target
Xparts.QPYun.Service.MobileAssistant.Controller.dll
-
Size
2.4MB
-
MD5
c19d36da009709b5b7b619e6cd9de876
-
SHA1
1dbd45f5204facc35895894f0ae9f9205af838ed
-
SHA256
892b02d017436f1119aa70308b0f6327fe5abc5321ef349f39043a9b858fe3c2
-
SHA512
c3429211ea754b7aea812ebc91b697a71ad6b2de8266ccc7ccbcfa259d46f2bd42d26052dac06d541453590916a0f52b3015f90dec551ec4c6ecb76750157cb8
-
SSDEEP
12288:MRyak+DdvQTKP/T8rTTEuGlwtkBYUrMlhDBW2XwTjPRUZwfKpEcTai2I95qwsOht:GoFskCPPxtJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Xparts.QPYun.Service.MobileAssistant.Controller.dll
Files
-
Xparts.QPYun.Service.MobileAssistant.Controller.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ