�߳�DLLע��
Static task
static1
Behavioral task
behavioral1
Sample
42ddf764189ee59a73dd974d839a3f0712dd26996529d713e31ab44ce2ea7a41.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
42ddf764189ee59a73dd974d839a3f0712dd26996529d713e31ab44ce2ea7a41.dll
Resource
win10v2004-20240802-en
General
-
Target
42ddf764189ee59a73dd974d839a3f0712dd26996529d713e31ab44ce2ea7a41
-
Size
3.3MB
-
MD5
a4eb72881da9e1c22c6efde186635b27
-
SHA1
b52c9f2546d031374de2923adb1e0a6e29c97827
-
SHA256
42ddf764189ee59a73dd974d839a3f0712dd26996529d713e31ab44ce2ea7a41
-
SHA512
e51cff0ed1dd80803b96e57c01424c289032bfa76002e26570989b3ad9b3179b93a2364235498584ff180491f6744139dc77ac656fd8639eaffa3b700bb9350e
-
SSDEEP
98304:cy61O6hwMpArWbCaFg0eJ1YBlQEQ+dxf:kOlWOb0+1mCEQ+d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42ddf764189ee59a73dd974d839a3f0712dd26996529d713e31ab44ce2ea7a41
Files
-
42ddf764189ee59a73dd974d839a3f0712dd26996529d713e31ab44ce2ea7a41.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 13.9MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.6MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ