DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
65948e860e55ca86bbd50fba4c7ba0b0N.dll
Resource
win7-20240705-en
General
-
Target
65948e860e55ca86bbd50fba4c7ba0b0N.exe
-
Size
168KB
-
MD5
65948e860e55ca86bbd50fba4c7ba0b0
-
SHA1
4c1b48fde65bebb26f8b5a249e10cf75593907de
-
SHA256
d97679f5cb175a5fa409413fc8fcf2174a3566cebab79e20ab03e865770b5581
-
SHA512
7df30fa6ee8714810503aedc366fa561baa92bf3b0c8100880b5bf9eb2c5ae1ab3a81ee511ffab2ea0104927c91528bd45d2c1c2cc8605775f19923742586648
-
SSDEEP
3072:/bv4qvyIuNT12ORP5LvqM2wdWLeNgxveb2h4jL:/bVluVYOR5spI2Bh4n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65948e860e55ca86bbd50fba4c7ba0b0N.exe
Files
-
65948e860e55ca86bbd50fba4c7ba0b0N.exe.dll regsvr32 windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ