Behavioral task
behavioral1
Sample
8f10dac9819b7f773f84a16683238a2c834b3cd44a2ed3fae8b601987b4a480e.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8f10dac9819b7f773f84a16683238a2c834b3cd44a2ed3fae8b601987b4a480e.dll
Resource
win10v2004-20240802-en
General
-
Target
8f10dac9819b7f773f84a16683238a2c834b3cd44a2ed3fae8b601987b4a480e
-
Size
6KB
-
MD5
d371c6138b9a4a2d79ff56db82a5c20a
-
SHA1
c6e82c0f0493897fce180642af6978b07215d0f0
-
SHA256
8f10dac9819b7f773f84a16683238a2c834b3cd44a2ed3fae8b601987b4a480e
-
SHA512
4050eec410e68c1a29bc7054e10952887e17717e9ce733c8ee95424c3b7888d43de0ea2372d00a3980f9e4ceeecc92f95e1715efa797d5d3b6b71a11473ad0e6
-
SSDEEP
96:dejm2fnyg6vwNEj380Qp77kqeKlzfpRVS:dT2fnqzj37QpfeK5B+
Malware Config
Extracted
metasploit
windows/download_exec
http://154.204.58.234:443/jquery-3.3.1.slim.min.js
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f10dac9819b7f773f84a16683238a2c834b3cd44a2ed3fae8b601987b4a480e
Files
-
8f10dac9819b7f773f84a16683238a2c834b3cd44a2ed3fae8b601987b4a480e.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ