UnInstall2
Static task
static1
Behavioral task
behavioral1
Sample
271c3693caa2ce61075a5903184bb7a5d22ca3778f0043f0d2f565a3711cba3dN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
271c3693caa2ce61075a5903184bb7a5d22ca3778f0043f0d2f565a3711cba3dN.dll
Resource
win10v2004-20240802-en
General
-
Target
271c3693caa2ce61075a5903184bb7a5d22ca3778f0043f0d2f565a3711cba3dN
-
Size
7KB
-
MD5
e57f10b051ad41fde86e4685212d66b0
-
SHA1
bb7b23d3a464045eb08cee6ee4e7c3ab1c1c1106
-
SHA256
271c3693caa2ce61075a5903184bb7a5d22ca3778f0043f0d2f565a3711cba3d
-
SHA512
c3a4cf9ee909c449f7c233347d8f8124858e2848e2ca09871d25269ea57ea9f2fc97e04320bb31f2d15b8a99a3cd73dd4754f037dec25486250366cf34850966
-
SSDEEP
96:frX69OmocXkne2q69CjSJ8hpZhv0bfTYsN47D7Gmqi:bQj8eR69CjSJKzN0h4CXi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 271c3693caa2ce61075a5903184bb7a5d22ca3778f0043f0d2f565a3711cba3dN
Files
-
271c3693caa2ce61075a5903184bb7a5d22ca3778f0043f0d2f565a3711cba3dN.dll windows:4 windows x86 arch:x86
dfd185aa21b84ba38c2c4806e42ae56e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteFileA
SetFileAttributesA
SetFileApisToANSI
SetFileApisToOEM
GetDriveTypeA
AreFileApisANSI
advapi32
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
dsav_shl
?DSAV_SHL0014@DSAVFILE@@QAEHPAXK@Z
?DSAV_SHL0017@DSAVFILE@@QAEXXZ
??1DSAVFILE@@UAE@XZ
??0DSAVFILE@@QAE@W4DSAVFILETYPE@@@Z
?DSAV_SHL0005@DSAVFILE@@QAEHPAEW4FileApisCodeType@@KH@Z
msvcrt
malloc
__CxxFrameHandler
??3@YAXPAX@Z
free
_initterm
strrchr
_adjust_fdiv
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 234B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 820B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ