PluginMain
Static task
static1
Behavioral task
behavioral1
Sample
40ec7c4cf3fd19448fd4d74091ef3251619ec85457f2b16db945fa804d1efb22.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40ec7c4cf3fd19448fd4d74091ef3251619ec85457f2b16db945fa804d1efb22.dll
Resource
win10v2004-20240802-en
General
-
Target
40ec7c4cf3fd19448fd4d74091ef3251619ec85457f2b16db945fa804d1efb22
-
Size
14.2MB
-
MD5
a08dd097567900f392e3827d286b6793
-
SHA1
060741ba9fab77200c179ab602fd8e793789b363
-
SHA256
40ec7c4cf3fd19448fd4d74091ef3251619ec85457f2b16db945fa804d1efb22
-
SHA512
d1f3f106abdd6af9d0a455453f361bac0cc61c63f21a58525eb7c8e9f9409224193a012601ab01fa4b8f963df05140617dfc77e5813068928072bda49b65bd88
-
SSDEEP
196608:7Y/JoUFGn2hxHHgvP1FvP19A3thjLnTAATke+HR6Nph15p9i1E53UPvi:7YNFU2w0hjLnch0d5vinvi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40ec7c4cf3fd19448fd4d74091ef3251619ec85457f2b16db945fa804d1efb22
Files
-
40ec7c4cf3fd19448fd4d74091ef3251619ec85457f2b16db945fa804d1efb22.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 535KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 112KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 13KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.winlice Size: 8.2MB - Virtual size: 8.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ