ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
8bdc53145fee6e64d57483a9f6c965a97098abda55a8af21230dd65cdf9c9f0fN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8bdc53145fee6e64d57483a9f6c965a97098abda55a8af21230dd65cdf9c9f0fN.dll
Resource
win10v2004-20240802-en
General
-
Target
8bdc53145fee6e64d57483a9f6c965a97098abda55a8af21230dd65cdf9c9f0fN
-
Size
56KB
-
MD5
8d18a04cd895be1d8a97bc2f3054c980
-
SHA1
7704fcae7babee7aa5a5653d33f60d0fe1430159
-
SHA256
8bdc53145fee6e64d57483a9f6c965a97098abda55a8af21230dd65cdf9c9f0f
-
SHA512
220655c75c8425151024e2ad2e67fcbfbb866d3523b42337618134af57d35fa54fdbc275ad74a1fe696b9b94543bd6a8742e8a4d5af9c7923d99a066efaaa3dd
-
SSDEEP
768:glLiIagfhOwdlXCh2/KTJgI0xhBwJ4i5Crfvo5qWPkjNqWD0ucfnf:gaepXk2/KFgLhuVADWwl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bdc53145fee6e64d57483a9f6c965a97098abda55a8af21230dd65cdf9c9f0fN
Files
-
8bdc53145fee6e64d57483a9f6c965a97098abda55a8af21230dd65cdf9c9f0fN.dll windows:5 windows x86 arch:x86
6dfbc160505aa2f7205766eaa6fe72a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CreateWindowExA
Exports
Exports
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 96B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 93B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ