_start@16
Static task
static1
Behavioral task
behavioral1
Sample
Manager.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Manager.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Manager.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
Manager.dll
Resource
win11-20240802-en
General
-
Target
Manager.dll
-
Size
3.5MB
-
MD5
8c49411cf8377605511a26cb928c6425
-
SHA1
3e2a63e38719f8efbf4f2c41fc7f78ea30839078
-
SHA256
28efe6792ddc5c57da31db5726dc31efb66294855307ab8f661b31312459d60b
-
SHA512
6602f004249c4bcbf77e4c4e4cc46a086f429ce30e825f4060bb2e32dad1bd6617c0ae0fc6cbd0bf7721a270a7299b521b9ec701f2fd2bf810752e3ba6a0495e
-
SSDEEP
98304:XTuxTmPq3N6bQ0Ol0hs/7qtv3VdgBvUCyPloN:qFmP580k/Gvl0cdS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Manager.dll
Files
-
Manager.dll.dll windows:6 windows x86 arch:x86
3cd48346c328fcae97e2d30913985e0c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
crypt32
CryptStringToBinaryA
ws2_32
WSAGetLastError
bcrypt
BCryptCloseAlgorithmProvider
advapi32
CryptAcquireContextA
secur32
QueryContextAttributesW
dnsapi
DnsFree
Exports
Exports
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 861KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ