luaopen_run
Static task
static1
Behavioral task
behavioral1
Sample
8ff41f6b729632bd9b96877399baee6809b82b22486c6c732fe589ff2c514380.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8ff41f6b729632bd9b96877399baee6809b82b22486c6c732fe589ff2c514380.dll
Resource
win10v2004-20240226-en
General
-
Target
8ff41f6b729632bd9b96877399baee6809b82b22486c6c732fe589ff2c514380
-
Size
2.5MB
-
MD5
d281c9b601ae01b9f3ad41eddfc1fc4d
-
SHA1
5ccbb57a65627eb4e17b77eecf9150f50aa4ba08
-
SHA256
8ff41f6b729632bd9b96877399baee6809b82b22486c6c732fe589ff2c514380
-
SHA512
7ab61b5daa43795ad55e279f6651cb728b77da9a5d7ab951c858dec068976811e33e45f47e8115ad92d0207aa19c309a47e6651b4f06aade475a3ae3edd59d38
-
SSDEEP
49152:U8t3BV6Wpgf+HZx7WILtMUb+AfIGaVzszpded2LEvULMT3NDFMnou7G9m:puihWIxMS+CIrBsDI24TT3Nio79
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ff41f6b729632bd9b96877399baee6809b82b22486c6c732fe589ff2c514380
Files
-
8ff41f6b729632bd9b96877399baee6809b82b22486c6c732fe589ff2c514380.dll windows:6 windows x64 arch:x64
15106b234db31c39b54302e9808ad5ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
WaitForSingleObject
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
advapi32
RegGetValueA
ws2_32
freeaddrinfo
Exports
Exports
Sections
.text Size: - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.WE110 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.WE111 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WE112 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 596B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 434B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ