Static task
static1
Behavioral task
behavioral1
Sample
a2b284c919fed2fbc3b1ec20729a3c87c1b5874f84829ecde5a769bf8b051b5c.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a2b284c919fed2fbc3b1ec20729a3c87c1b5874f84829ecde5a769bf8b051b5c.dll
Resource
win10v2004-20240709-en
General
-
Target
a2b284c919fed2fbc3b1ec20729a3c87c1b5874f84829ecde5a769bf8b051b5c.zip
-
Size
11.7MB
-
MD5
0d8ae34ed9072fe47e77fc43c1e23ec5
-
SHA1
fa9cfd64d359a9c0a21d6e6dff737a04d6b7a1c8
-
SHA256
8188d1b7164ef22a9bb96b0803a06a098147c94d4657301759a17d6cb89c80c1
-
SHA512
de792cbf7984dd1e5e3084e7194ae697b9304f3b5b764aa723b6f9dd7a717ec45d1f431dca1ee4f65e596026bccb8d1a0b8e7c2c8a955c53a48a51161f7017aa
-
SSDEEP
196608:4TnBv9teMCD6wQ0BSzziqEHexFpi5s2w62T4RWWPH2aKvLEd+:4TnBQ6eBSaglibT2T4R9WaKvLb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a2b284c919fed2fbc3b1ec20729a3c87c1b5874f84829ecde5a769bf8b051b5c
Files
-
a2b284c919fed2fbc3b1ec20729a3c87c1b5874f84829ecde5a769bf8b051b5c.zip.zip
Password: infected
-
a2b284c919fed2fbc3b1ec20729a3c87c1b5874f84829ecde5a769bf8b051b5c.dll windows:4 windows x86 arch:x86
Password: infected
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 17.9MB - Virtual size: 17.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ