WindowsUpdateW
Static task
static1
Behavioral task
behavioral1
Sample
47f9cd05e9dc2528c69a6fb02e0d82cba82cce1dabf77e83dd2e29b5d0ccea72.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47f9cd05e9dc2528c69a6fb02e0d82cba82cce1dabf77e83dd2e29b5d0ccea72.dll
Resource
win10v2004-20240802-en
General
-
Target
47f9cd05e9dc2528c69a6fb02e0d82cba82cce1dabf77e83dd2e29b5d0ccea72
-
Size
308KB
-
MD5
6421cac659b46ce5c970b5347c5e26f3
-
SHA1
e4ecbb84a43f48c224d94cb002f71057ba0de431
-
SHA256
47f9cd05e9dc2528c69a6fb02e0d82cba82cce1dabf77e83dd2e29b5d0ccea72
-
SHA512
2cab7853703940e33288dec99f691142d367ccfe56d31f12f3cb7ec19d5a0a9ddead1895e91d526a48cdf65621d339519ad9c96e789a259481a726ecca9e8b65
-
SSDEEP
6144:G0fdED2dxXgntPwdxbm6yrOpheLzv0uALzB3SIcpQ2zee0wBL2vFh7WOY:G0fSD27gnVwdxbJyKvWD0RB3SE7ez1gy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47f9cd05e9dc2528c69a6fb02e0d82cba82cce1dabf77e83dd2e29b5d0ccea72
Files
-
47f9cd05e9dc2528c69a6fb02e0d82cba82cce1dabf77e83dd2e29b5d0ccea72.dll windows:5 windows x64 arch:x64
fcb45ea8337ef1b42e61f5ba95b913de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_SYSTEM
IMAGE_FILE_DLL
IMAGE_FILE_UP_SYSTEM_ONLY
Imports
{�p�u���n�0
s�G�D�l�]�F�Y�G�0
d�P�Y�C�U�P�S�Q�0
s�G�D�r�_�G�C�"
w�V�E�P�^�f�B�A�_�[�0
w�V�E�N�Q�J�Q�G�0
w�V�_�K�Q�f�Y�G�0
v�L�s�M�U��c�Q�U�v�]�v�d�q�U�K�Y�n�S�N�Y�G�+v�N�d�O�d�q�C�G�d�O�0
c�Q�U�v�]�v�d�q�U�K�Y�n�S�N�Y�G�+v�N�d�O�d�q�C�G�d�O�0
v�N�d�O�d�q�C�G�d�O�0
u�R�^�g�F�P�^�G�D�V�Y�E�q��w�V�Y�G�D�P�R�V�C�"
w�V�Y�G�D�P�R�V�C�"
v�L�v�P�D�K�U�"
v�L�~�Z�v�N�q�p
s�R�v�N�q�`}�T�v�N�q��w�V�E�P�^�r�_�G�C�F��
}�T�v�N�q��w�V�E�P�^�r�_�G�C�F��
w�V�E�P�^�r�_�G�C�F��
s�G�D�v�B�C�0
s�G�D�v�_�J�\��c�C�C�M�0
d�P�Q��v�P�D��d�P�Q��~�Z�0
d�P�Q��~�Z�0
g�U��G�d�P�Q�a�^�G�D�'g�U��G�d�P�Q�a�^�G�D��f�P�E�N�\�M�0
g�U��G�d�P�Q�a�^�G�D��f�P�E�N�\�M�0
f�P�E�N�\�M�0
f�P�E�N�B�V�S�"
c�V�Q�V�B�M�0
c�V�Q�G�`�R�x�L�\�q�Q�G��`�G�~�O�T�K�U��
`�G�~�O�T�K�U��
s�G�D�d�\�c�g�K�~�O�T�K�U�"
g�K�~�O�T�K�U�"
w�V�_�W�U�K�U�C�U�"
w�V�_�R�D�P�Q�G�0
w�V�U�Q�_�g�q�nw�V�s�"
w�V�s�"
w�V�u�a�0
w�V�B�A�C�j�Q�"
y�K�Y�N�J�r�_�v�B�C�q�V�Y�W�U�K�D��
t�N�D�r�_�v�B�C�q�V�Y�W�U�K�D�fc�V�B�M�}�F�0
c�V�B�M�}�F�0
e�F�D�r�_�v�B�C�q�V�Y�W�U��`�M�U�Q�T�M�U�Q�_�k�0
`�M�U�Q�T�M�U�Q�_�k�0
`�M�U�Q��K�C�"
`�M�U�Q��G�D��w�V�_�R�D�P�Q�G�H�"
w�V�_�R�D�P�Q�G�H�"
f�P�E�N�B�G�
f�P�E�N�E�P�0
f�P�E�N�\�M�u�"
f�P�E�N�B�V�S�g�0
�G�`�M�U�Q��
s�G�D�p�]�V�d�P�Q�"
s�L�U�V�Q�G�`�R�0
b�C�`�M�U�Q�U�M�I�=g�K�U�P�S�Q�}�O�B�"
g�K�U�P�S�Q�}�O�B�"
w�V�X�G�T�M�D�Z�0
c�V�X�G�T�M�D�Z�0
b�Q�]�v�B�C�0
s�M�U�C�T�G��
t�R�Y�C�U�C�T�G�Y}�R�Y�U�V�K�U��e�O�@�K�G�D�Y�G��
}�R�Y�U�V�K�U��e�O�@�K�G�D�Y�G��
e�O�@�K�G�D�Y�G��
s�G�D�d�\�o�@�K�W�"
u�K�`�M�U�Q� u�K�d�P�Q�"
u�K�d�P�Q�"
b�C�v�N�0
w�V�E�P�^�v�B�C�0
w�V�E�P�^�r�_�G�C��w�V�E�P�^�v�B�C�0
}�N�Y�[�U�M�Y�G�X�P��w�V�E�P�^�r�_�G�C��w�V�E�P�^�v�B�C�0
w�V�E�P�^�f�B�A�_�[�0
c�V�E�P�^�f�B�A�_�[�0
w�V�D�P�E�k�V�c�Zc�V�E�P�^�f�B�A�_�[�0
t�Q�_�L�S�l�]�F�Y�G�iw�V�D�P�E�k�V�c�Zc�V�E�P�^�f�B�A�_�[�0
s�G�D�r�@�"
w�V�Y�I�_�L�0
w�V�_�C�d�O�0
v�W�X�K�U�W�V�P�0
g�K�U�K�U�]v�W�X�K�U�W�V�P�0
g�K�v�P�Y�E�U�@�U�V�4g�K�U�K�U�]v�W�X�K�U�W�V�P�0
c�G�@�g�K�v�P�Y�E�U�@�U�V�4g�K�U�K�U�]v�W�X�K�U�W�V�P�0
w�V�_�W�U�C�T�G�0
|�C�|�@�Q�[�0
w�V�Q�V�B�M�0
x�C�v�G�0
b�K�U�Z�U�V�_�"
c�V�^�K�_�O�^�t�B�C�\�u��b�K�U�Z�U�V�_�"
c�V�^�K�_�O�^�t�B�C�\�c�ec�V�^�K�_�O�^�t�B�C�\�u��b�K�U�Z�U�V�_�"
x�C�q�N�S��x�C�v�G�0
x�C�t�Q�B�[��x�C�q�N�S��x�C�v�G�0
x�C�s�G�D�"
c�V�^�m�v�N�0
s�G�D�d�\�u�ac�V�^�m�v�N�0
g�K�U�M�C�N�g��
c�V�D�j�^�N�0
w�V�D�K�W�[�U�"
|�o�@�V�Y�E�0
s�O�Q�G�D�K�W�"
x�C�c�X�0
|�C�|�@�Q�[�0
�V�E�f�R�E�D�K�W�"
v�G�u�T�B�L�U�V�D�K�W�u���V�E�f�R�E�D�K�W�"
w�V�^�K�_�O�^�q�B�L�C�"
a�G�I�G�V�P�Q�A�s�W�D�P��w�V�^�K�_�O�^�q�B�L�C�"
b�O�F�f�B�A�_�[�0
s�G�D�f�B�A�_�[�0
t�N�D�d�\�u��
w�V�Y�G�I�G��
c�V�Y�G�_�L�U�g�0
c�V�Y�G�_�L�U�"
b�C�s�L�_�G�0
w�V�_�Q�\�o�T�"
w�V�_�Q�\�a�0
g�F�s�C�d�o�\�K�I�G��w�V�_�Q�\�a�0
w�V�`�L�_� g�F�s�C�d�o�\�K�I�G��w�V�_�Q�\�a�0
y�t�\�F�_�G�Q�G�xw�V�`�L�_� g�F�s�C�d�o�\�K�I�G��w�V�_�Q�\�a�0
b�N�^�K�T�Z�y�t�\�F�_�G�Q�G�xw�V�`�L�_� g�F�s�C�d�o�\�K�I�G��w�V�_�Q�\�a�0
w�V�B�A�T�P�C�"
�G�d�P�Q�"
v�G�|�@�Q�[�Lw�V�B�A�T�P�C�"
u�A�T�r�Y�V�B��
t�A�T�r�Y�V�B�w�V�_�W�U�C�T�G�H�"
w�V�_�W�U�C�T�G�H�"
q�G�Y�G�@�Q�~�k��w�V�I�V�]�K�U�Q�Y�G�Y�G��x�C�b�c�\�A��w�V�_�O�^�n�^�c��w�V�E�P�^�v�B�C�y�"
w�V�I�V�]�K�U�Q�Y�G�Y�G��x�C�b�c�\�A��w�V�_�O�^�n�^�c��w�V�E�P�^�v�B�C�y�"
x�C�b�c�\�A��w�V�_�O�^�n�^�c��w�V�E�P�^�v�B�C�y�"
w�V�_�O�^�n�^�c��w�V�E�P�^�v�B�C�y�"
w�V�E�P�^�v�B�C�y�"
w�V�D�j�^�N�0
w�V�_�W�U�K�U�C�U�"
y�f�R�E�U�r�U�G�D�y�r�_�G�C�P�U�V�B�r�U�G�D��
y�r�_�G�C�P�U�V�B�r�U�G�D��
u�V�B�P�D�A�\�G�D�M�0
|�C�U�P�D�A�\�G�D�M�0
y�K�Y�N�J�a�Y�K�Q�q�S�K�^�L�c�K�s�W�D��
t�N�D�a�Y�K�Q�q�S�K�^�b�N�Q�V�B�a�^�G�D�b�N�_�I�@�W�S�K�^�L�B�"
b�N�Q�V�B�a�^�G�D�b�N�_�I�@�W�S�K�^�L�B�"
b�N�_�I�@�W�S�K�^�L�B�"
b�N�Y�V�Q�w�G�L�0
e�J�^�N�T�Z�U�V�_�d�\�G�0
c�V�^�C�T�G�u�A�@�K�^�K�D�P��d�Q�\�M�0
d�Q�\�M�0
d�Q�U�t�\�G��d�Q�U�t�\�G��d�Q�B�G�jw�V�D�P�E�k�V�u�w�V�_�W�U�C�T�G�0
d�Q�U�t�\�G��d�Q�B�G�jw�V�D�P�E�k�V�u�w�V�_�W�U�C�T�G�0
d�Q�B�G�jw�V�D�P�E�k�V�u�w�V�_�W�U�C�T�G�0
w�V�D�P�E�k�V�u�w�V�_�W�U�C�T�G�0
w�V�_�W�U�C�T�G�0
|�C�|�@�Q�[�H�"
q�t�`���n�0
w�V�_�G�y�D�B�C�Y�L�
�G�`�M�U�Q�_�G�0
s�[�D�G�U�Q�s�L�U�V��
s�[�D�A�E�P�s�L�U�V�0
s�[�D�G�b�L�_�"
s�G�[�M�U�o�]�G�C�K�0
t�R�Y�C�U�M�U�g�0
|�E�^�Q�B�"
|�M�E�c�S�W�D�K�q��|�E�^�Q�B�"
v�G�c�F��|�M�E�c�S�W�D�K�q��|�E�^�Q�B�"
q�N�S�V�q�F�^�V�Q�K�U�K�0
y�R�B�M�Q�G�Q�G�`�R�s�K�^�"
b�T�B�v�c�N�0
w�V�C�P�Q�G�0
s�G�D�r�_�G�C�K�X�M�U�u�dw�V�C�P�Q�G�0
s�G�D�r�_�G�C�K�X�M�_�u�~
s�G�D�r�_�G�C�Q�C�P�0
y�R�B�M�Q�G�_�E�T�L�C�P�{
|�M�E�r�Y�K�U�G�Q�W�q�sy�R�B�M�Q�G�_�E�T�L�C�P�{
q�H�C�v�[�L�B�T�\�E�C��|�M�E�r�Y�K�U�G�Q�W�q�sy�R�B�M�Q�G�_�E�T�L�C�P�{
�G�d�P�Q�v�[�L�
g�l�~�v�t�n�6
y�V�B�G�b�C�v�N�0
y�V�B�G�s�M�U�C�T�G�q
y�V�B�G�s�L�U�V�0
y�V�B�G�a�G�I�C�Q�T�Y�C�\�"
y�V�B�G�a�G�I�R�Y�L�0
y�V�B�G�c�V�@�K�^�"
y�V�B�G�c�V�D�V�C�C�\�C�[�W
x�V��G�b�S�U�V�0
x�V�q�F�U�W�C�j�Q�G�C�"
x�V�c�L�b�S�U�V�0
x�V�a�G�I�L�_�"
y�V�B�G��G�q�k
g����\�"
ord15
ord52
ord23
ord19
ord4
ord10
g�c�_�V�0
ord116
ord115
ord3
ord14
ord9
ord8
ord16
ord22
ord111
ord151
ord1
ord2
ord11
ord13
ord17
ord18
ord20
g�c�_�I�D�"
Exports
Exports
Sections
�G�D� Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�F�D�" Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�C�Q� Size: 29KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�F�D�" Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�G�_�" Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ