Static task
static1
Behavioral task
behavioral1
Sample
6cf7848e5d85763ed11ce26437adfe4737164c7aab995d8ae3949413c5322102.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6cf7848e5d85763ed11ce26437adfe4737164c7aab995d8ae3949413c5322102.dll
Resource
win10v2004-20240802-en
General
-
Target
6cf7848e5d85763ed11ce26437adfe4737164c7aab995d8ae3949413c5322102
-
Size
1.6MB
-
MD5
b738f0b27353d41269fca8561428d24c
-
SHA1
1dda66ed1b505966ca8f9ad730263a8e1aa0eb43
-
SHA256
6cf7848e5d85763ed11ce26437adfe4737164c7aab995d8ae3949413c5322102
-
SHA512
5ff42ae351152fd263fb204851fa1be70cf959ff722d006e531692ee9bc6917712fc301837605a13b7d74c85d5e80dcb5bc439402746948f7082a8a5f32cbd4c
-
SSDEEP
24576:YB3oMJN9ipkaYpR8EdJGuP7ItBvQGxCss5x1F13UrfViZGpwtoxe7omW4gPc6s5M:gov7YpR88G0MvQKC55xj6dNx9c95M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cf7848e5d85763ed11ce26437adfe4737164c7aab995d8ae3949413c5322102
Files
-
6cf7848e5d85763ed11ce26437adfe4737164c7aab995d8ae3949413c5322102.dll windows:6 windows x64 arch:x64
beaaa74556638659c286f95839aaaec4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
DisableThreadLibraryCalls
user32
GetForegroundWindow
d3d9
Direct3DCreate9
d3dx9_43
D3DXVec3Project
imm32
ImmSetCompositionWindow
iphlpapi
GetInterfaceInfo
msvcrt
_wcsnicmp
psapi
GetMappedFileNameW
advapi32
RegSetValueExA
shell32
SHGetFolderPathW
Sections
.text Size: 280KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ShellMo Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.ShellMo Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ