QueryInterface
Static task
static1
Behavioral task
behavioral1
Sample
c8ef6df89bb59be0f0652507494f6aa52288a4fb2a6ce1866aa8f2a169773cf7.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c8ef6df89bb59be0f0652507494f6aa52288a4fb2a6ce1866aa8f2a169773cf7.dll
Resource
win10v2004-20240802-en
General
-
Target
c8ef6df89bb59be0f0652507494f6aa52288a4fb2a6ce1866aa8f2a169773cf7
-
Size
3.8MB
-
MD5
77c4e950302dcac46eeb3e12ffac3c6a
-
SHA1
36ea98ea1b4f18a8dd5f2c157246c3ed26c25e62
-
SHA256
c8ef6df89bb59be0f0652507494f6aa52288a4fb2a6ce1866aa8f2a169773cf7
-
SHA512
95560bbeceb4fb3bf40948c6421fd9631ae820539e55dfb9c279b4e162ada7d3225accec4de982db3e5af9430259861ea804376ff1e73a3b35fb544df86ad3d5
-
SSDEEP
98304:UwAESCtl3KIpddseLCyoKeG6uqZ5t5FQs/oZ2:UwlSe3K6sD6X6uqZdroZ2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8ef6df89bb59be0f0652507494f6aa52288a4fb2a6ce1866aa8f2a169773cf7
Files
-
c8ef6df89bb59be0f0652507494f6aa52288a4fb2a6ce1866aa8f2a169773cf7.dll windows:6 windows x86 arch:x86
b3586fcd430e287da84ee88f5d6371a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapReAlloc
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
UnregisterClassW
Exports
Exports
Sections
.text Size: - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x8} Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.3/t Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HY6 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ