Static task
static1
Behavioral task
behavioral1
Sample
2e83781f52db4831b34074210d2727560d14ce9e2c88246f214fac3d3a3f7b53.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2e83781f52db4831b34074210d2727560d14ce9e2c88246f214fac3d3a3f7b53.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
2e83781f52db4831b34074210d2727560d14ce9e2c88246f214fac3d3a3f7b53.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
2e83781f52db4831b34074210d2727560d14ce9e2c88246f214fac3d3a3f7b53.dll
Resource
win11-20240419-en
General
-
Target
2e83781f52db4831b34074210d2727560d14ce9e2c88246f214fac3d3a3f7b53
-
Size
741KB
-
MD5
d76ee4f0ddbe2bd93c67a340c6c0a75c
-
SHA1
ab1a289cdddeab2388723afc8c48c8e8c76e1aa1
-
SHA256
2e83781f52db4831b34074210d2727560d14ce9e2c88246f214fac3d3a3f7b53
-
SHA512
24f99aa1d56e939479dcd08c93a3369e6f3793e121baa72860ba172ad5c08e1f964ee319249e2f969601604915025e0e2f1ea58b467a715c93d73ec8a23527b2
-
SSDEEP
6144:Pzpd1exLXnz/hqqD3Qg+1obZDV41UA5UB:7pd1yLnz0qjy1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e83781f52db4831b34074210d2727560d14ce9e2c88246f214fac3d3a3f7b53
Files
-
2e83781f52db4831b34074210d2727560d14ce9e2c88246f214fac3d3a3f7b53.dll windows:4 windows x86 arch:x86
561bef7b7f6bc12a2585d5e0fd7e6682
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcr120_clr0400
_mbbtombc_l
wminet_utils
ResetSecurity
SetSecurity
BlessIWbemServices
BlessIWbemServicesObject
GetPropertyHandle
WritePropertyValue
Clone
VerifyClientKey
GetQualifierSet
Get
Put
Delete
GetNames
BeginEnumeration
Next
EndEnumeration
GetPropertyQualifierSet
Clone
GetObjectText
SpawnDerivedClass
SpawnInstance
CompareTo
GetPropertyOrigin
InheritsFrom
GetMethod
PutMethod
DeleteMethod
BeginMethodEnumeration
NextMethod
EndMethodEnumeration
GetMethodQualifierSet
GetMethodOrigin
QualifierSet_Get
QualifierSet_Put
QualifierSet_Delete
QualifierSet_GetNames
QualifierSet_BeginEnumeration
QualifierSet_Next
QualifierSet_EndEnumeration
GetQualifierSet
GetDemultiplexedStub
CreateInstanceEnumWmi
CreateClassEnumWmi
ExecQueryWmi
ExecNotificationQueryWmi
PutInstanceWmi
PutClassWmi
CloneEnumWbemClassObject
ConnectServerWmi
GetErrorInfo
Initialize
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 725KB - Virtual size: 725KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ