MainExt
Static task
static1
Behavioral task
behavioral1
Sample
29258fdf1308d5a0d069556777ab53628627cb88bd76f3b4bc23f65b30e9c1fb.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29258fdf1308d5a0d069556777ab53628627cb88bd76f3b4bc23f65b30e9c1fb.dll
Resource
win10v2004-20240704-en
General
-
Target
29258fdf1308d5a0d069556777ab53628627cb88bd76f3b4bc23f65b30e9c1fb
-
Size
7.1MB
-
MD5
16e21620c4497c23fba8eea87b6c77d2
-
SHA1
d853967494c0059a0218b0cd94c9e9d5f890fce5
-
SHA256
29258fdf1308d5a0d069556777ab53628627cb88bd76f3b4bc23f65b30e9c1fb
-
SHA512
968c3841da5f1083af8ffbd84a4529adde6d5bd0b0d6a5ffe05db31314071535235b61ab77ccfd137b6b22e9d3009d7c3cb01750fe0233a46899b65d9fc2ebd6
-
SSDEEP
98304:+che4hvsjnWtSfxZu3WTQwFcgdxUFZ9LWEDctV5jIqB4n0hLXR:+SvsjnWcfxZu6LFUZWEDctVBO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29258fdf1308d5a0d069556777ab53628627cb88bd76f3b4bc23f65b30e9c1fb
Files
-
29258fdf1308d5a0d069556777ab53628627cb88bd76f3b4bc23f65b30e9c1fb.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Exports
Exports
Sections
.text Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ