Static task
static1
Behavioral task
behavioral1
Sample
59ac1b76180d491293be58b14b7aee0070e232202445bb9eea676c8fa3c381da.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
59ac1b76180d491293be58b14b7aee0070e232202445bb9eea676c8fa3c381da.dll
Resource
win10v2004-20240426-en
General
-
Target
59ac1b76180d491293be58b14b7aee0070e232202445bb9eea676c8fa3c381da
-
Size
257KB
-
MD5
d1dc9cd84b9ba5e462e9f76513928d42
-
SHA1
0f2df217f5970048692bc2365a07c7cd52c55c17
-
SHA256
59ac1b76180d491293be58b14b7aee0070e232202445bb9eea676c8fa3c381da
-
SHA512
599051b030f54a589fff0b0977f69cd5adbadb7393b45db831debdd41cbf85252a1019041bad3fae48f981a71ff9b2118343ab01e69c90963e4ea53c5c74503e
-
SSDEEP
6144:mqhaoZZRrvPJtomDFQv8ldJ6EkJOcT4sOXGOrrlae+q92:m8ftLromBQv+dMeerOrrlPJ92
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59ac1b76180d491293be58b14b7aee0070e232202445bb9eea676c8fa3c381da
Files
-
59ac1b76180d491293be58b14b7aee0070e232202445bb9eea676c8fa3c381da.dll windows:5 windows x86 arch:x86
26e667726e4ab41eee82d7f63e3259cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
user32
CharLowerW
advapi32
RegCloseKey
shell32
PathMakeUniqueName
Sections
Size: - Virtual size: 76KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE