_ReflectiveLoader@0
Static task
static1
Behavioral task
behavioral1
Sample
d32d9ab66cf41339dbab3c311bc5f80798e16c17218533a56a43c8a885ccf9c3.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
d32d9ab66cf41339dbab3c311bc5f80798e16c17218533a56a43c8a885ccf9c3.exe
Resource
win10v2004-20240508-en
General
-
Target
d32d9ab66cf41339dbab3c311bc5f80798e16c17218533a56a43c8a885ccf9c3
-
Size
31KB
-
MD5
48aec76b66bdef1a1d775f6af719a132
-
SHA1
583d2b84c3c8553add0b351d8bef61066e5785fd
-
SHA256
d32d9ab66cf41339dbab3c311bc5f80798e16c17218533a56a43c8a885ccf9c3
-
SHA512
530cc949535df25144c46e7870aef248e1dbf24263f633bf9e20a4f2a7e7274c6fb2b6e05d5342698bedca7fc4e4fb006d486b58d1a67b920847696104905655
-
SSDEEP
768:vOdi7U8bmm64KgiV6suSRmg7tgUGi0i9QXOKa91T0W2hwhmrn8:v6QDbmm64Kg06suSRmytpGi0idKanT0C
Malware Config
Signatures
-
Detects Reflective DLL injection artifacts 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_ReflectiveLoader -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d32d9ab66cf41339dbab3c311bc5f80798e16c17218533a56a43c8a885ccf9c3
Files
-
d32d9ab66cf41339dbab3c311bc5f80798e16c17218533a56a43c8a885ccf9c3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 29KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 697B - Virtual size: 697B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ