boot_B
Static task
static1
Behavioral task
behavioral1
Sample
720831a1aac4b7ce249ca3f45e233f1364e1245a9647e7871ba076e6793cddd1.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
720831a1aac4b7ce249ca3f45e233f1364e1245a9647e7871ba076e6793cddd1.dll
Resource
win10v2004-20240508-en
General
-
Target
720831a1aac4b7ce249ca3f45e233f1364e1245a9647e7871ba076e6793cddd1
-
Size
78KB
-
MD5
a3ef749f3348450fe328d9dbee907502
-
SHA1
6059a8df00987d06fb0b11cc7f891fa8db549c95
-
SHA256
720831a1aac4b7ce249ca3f45e233f1364e1245a9647e7871ba076e6793cddd1
-
SHA512
15db15d4ee3785ccb8e8d08254553a11d11c5eb9c7ee353bae23d9ca4e4ded784ef98b1d9858578ac3014b03a5313b2f5a2e40bb1a117bd7e8e5508a2c635d99
-
SSDEEP
1536:WeL48WEruq9A2kViuX0tg2mlQvJAIpNzBgrrq7OHGUtxNAvxNE5LZQJ8eLP:DL48jKqC1V1Xwg2saJAGVgrtHP7NAvxr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 720831a1aac4b7ce249ca3f45e233f1364e1245a9647e7871ba076e6793cddd1
Files
-
720831a1aac4b7ce249ca3f45e233f1364e1245a9647e7871ba076e6793cddd1.dll windows:4 windows x64 arch:x64
386f41d4a72ff3c58acad2c9c8cf1c78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
perl538
PL_No
PL_WARN_ALL
PL_WARN_NONE
PL_Yes
PL_hash_state_w
PL_op_desc
PL_op_name
PL_opargs
Perl_PerlIO_stderr
Perl_PerlIO_stdin
Perl_PerlIO_stdout
Perl_av_fetch
Perl_av_push
Perl_call_method
Perl_cop_fetch_label
Perl_croak
Perl_croak_nocontext
Perl_croak_xs_usage
Perl_custom_op_get_field
Perl_cv_const_sv
Perl_cvgv_from_hek
Perl_emulate_cop_io
Perl_get_av
Perl_get_hv
Perl_get_sv
Perl_gv_fetchfile
Perl_gv_fetchpvn_flags
Perl_gv_stashpv
Perl_hv_common
Perl_hv_common_key_len
Perl_hv_fill
Perl_hv_iterinit
Perl_hv_iternext_flags
Perl_hv_placeholders_get
Perl_hv_riter_p
Perl_markstack_grow
Perl_mg_find
Perl_mg_get
Perl_mg_set
Perl_mg_size
Perl_more_sv
Perl_mro_method_changed_in
Perl_multiconcat_stringify
Perl_multideref_stringify
Perl_my_cxt_init
Perl_newCONSTSUB
Perl_newRV
Perl_newSV
Perl_newSVhek
Perl_newSViv
Perl_newSVnv
Perl_newSVpv
Perl_newSVpvf
Perl_newSVpvn
Perl_newSVpvn_flags
Perl_newSVrv
Perl_newSVuv
Perl_newXS
Perl_newXS_deffile
Perl_op_class
Perl_op_parent
Perl_refcounted_he_chain_2hv
Perl_stack_grow
Perl_sv_2bool_flags
Perl_sv_2iv_flags
Perl_sv_2mortal
Perl_sv_2nv_flags
Perl_sv_2pv_flags
Perl_sv_2pvbyte_flags
Perl_sv_backoff
Perl_sv_bless
Perl_sv_catpvf
Perl_sv_catpvn_flags
Perl_sv_free2
Perl_sv_magicext
Perl_sv_newmortal
Perl_sv_setiv
Perl_sv_setiv_mg
Perl_sv_setnv_mg
Perl_sv_setpvf
Perl_sv_setpvn
Perl_sv_setsv_flags
Perl_sv_setuv
Perl_sv_setuv_mg
Perl_sv_uni_display
Perl_sv_upgrade
Perl_utf8_length
Perl_xs_boot_epilog
Perl_xs_handshake
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memchr
memcpy
realloc
strcmp
strlen
strncmp
vfprintf
Exports
Exports
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 66B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ