DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ef86afba938c1b1972058167e59a4b60N.dll
Resource
win7-20240708-en
General
-
Target
ef86afba938c1b1972058167e59a4b60N.exe
-
Size
161KB
-
MD5
ef86afba938c1b1972058167e59a4b60
-
SHA1
871b8779b34e467d29241daf4b44d56e474bb57d
-
SHA256
bec0105c4e88238e29fb0b9befdaa2221fe5c781e74472cd914e8127f15c658b
-
SHA512
15f4d8e6eb7229c3bb2c768e2133b30d9569466122597c2be1d5019b02dd009e7ae31808bd3b30bd97cd24aa21fe909b3f62f9029df5039395a8b72f2bfad27c
-
SSDEEP
3072:sEj3ww/Ajpf4hjGzFwOWj6/sXAx9LcPwFW/fKaAAF2vKo7anIohDC/:rgwbiFfFsmWnKaAAFLo7aI4DC/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef86afba938c1b1972058167e59a4b60N.exe
Files
-
ef86afba938c1b1972058167e59a4b60N.exe.dll regsvr32 windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ