_SbieDll_Hook@16
Static task
static1
Behavioral task
behavioral1
Sample
27fb250c525ff20b947742d0bcb57cff458385a1f2b66d11124030b478c1ada5N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
27fb250c525ff20b947742d0bcb57cff458385a1f2b66d11124030b478c1ada5N.dll
Resource
win10v2004-20240802-en
General
-
Target
27fb250c525ff20b947742d0bcb57cff458385a1f2b66d11124030b478c1ada5N
-
Size
4.6MB
-
MD5
7d2d0b792aeba6debdc303749e678320
-
SHA1
4c312dac5779636d31cdf1a78707d42717d1999f
-
SHA256
27fb250c525ff20b947742d0bcb57cff458385a1f2b66d11124030b478c1ada5
-
SHA512
59740c8d1cfd1aa6a09e22989ef7ac87c769a35ed79964502c7677cc103609df92fe4b71cbdee7d48912d2ee804fdb9141525d24213996b4a728cc3c20bc8633
-
SSDEEP
98304:2u6vOjpN0H3zgdXgK3c8iBxFs2iqkyyMtFHzkYhAxcikKql3Wi:5Bpm2R3ZEtpz5ATkK63t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27fb250c525ff20b947742d0bcb57cff458385a1f2b66d11124030b478c1ada5N
Files
-
27fb250c525ff20b947742d0bcb57cff458385a1f2b66d11124030b478c1ada5N.dll windows:6 windows x86 arch:x86
b4ca6f0ad0fe5ce382aa3bee0f2fba93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
Exports
Exports
Sections
.text Size: - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.h@n Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
./=A Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.>q] Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ