_SbieDll_Hook@16
Static task
static1
Behavioral task
behavioral1
Sample
4b612d715f140a15e128c5d7386040457a33ce8b17a7e82dda063883b1d980ab.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b612d715f140a15e128c5d7386040457a33ce8b17a7e82dda063883b1d980ab.dll
Resource
win10v2004-20240802-en
General
-
Target
4b612d715f140a15e128c5d7386040457a33ce8b17a7e82dda063883b1d980ab
-
Size
4.7MB
-
MD5
5cf7e02da5e3670c27f652a77e77219c
-
SHA1
56b0bcc642e9e4e2d51d49715159e32600bab5e5
-
SHA256
4b612d715f140a15e128c5d7386040457a33ce8b17a7e82dda063883b1d980ab
-
SHA512
0d181b9e1120135c7fe6382e7b6fe8ca2d5969172d57d4bb3e4ff403c05da4eed7aac7fff3c4865082bfe48d67ddbc88b7270a1dd3bcba5106dc147b0b7078dc
-
SSDEEP
98304:XfKvdjBBRLhaAfvgQHWyQLAFdH8zsgI9ElpG6XVLM/22wBGp68NjriBL3Ij:vKvdjdL1vxWyQLmdcIzmlpGYoyopRKLq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b612d715f140a15e128c5d7386040457a33ce8b17a7e82dda063883b1d980ab
Files
-
4b612d715f140a15e128c5d7386040457a33ce8b17a7e82dda063883b1d980ab.dll windows:6 windows x86 arch:x86
b4ca6f0ad0fe5ce382aa3bee0f2fba93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
Exports
Exports
Sections
.text Size: - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c+w Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.*rn Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SXP Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ