ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3bc89ebe9b9d2015127d7a189a38658bcc84a6ecffdb95c57ee45c5a37e4b17a.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bc89ebe9b9d2015127d7a189a38658bcc84a6ecffdb95c57ee45c5a37e4b17a.dll
Resource
win10v2004-20240802-en
General
-
Target
3bc89ebe9b9d2015127d7a189a38658bcc84a6ecffdb95c57ee45c5a37e4b17a
-
Size
9.9MB
-
MD5
ff5bf1fc5e3741292433d3cad4181be7
-
SHA1
64b6ed91535a8f8edffd038e77372dbfac0123fe
-
SHA256
3bc89ebe9b9d2015127d7a189a38658bcc84a6ecffdb95c57ee45c5a37e4b17a
-
SHA512
0550730f59be2347e32335b30f4cb979d0223a50387f1dd8ea537670e0d8e75ad977704a4a199bd9e858cf1568ee532b64645b224ffe9d074f65081be184c303
-
SSDEEP
196608:ko8xi1PFUmAev3Kbnm200cbsGjzkup2MQ3BbLcQTaufQ1pV9RHOMn:koC+KmfWm20k6kFnTaqOV9VO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bc89ebe9b9d2015127d7a189a38658bcc84a6ecffdb95c57ee45c5a37e4b17a
Files
-
3bc89ebe9b9d2015127d7a189a38658bcc84a6ecffdb95c57ee45c5a37e4b17a.dll windows:6 windows x64 arch:x64
ebaf2dd5b89c253eea5509a614521a5e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameW
Exports
Exports
Sections
.text Size: - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.-"2\ Size: - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
."-Y" Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ZF'A Size: 9.9MB - Virtual size: 9.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ