latrodectus | 28d0000[.]dll

General

Target
28d0000.dll
Size 80KB
Sample240927-asgr3sydma
SHA256 4d7b0b80d4877bbff8c227c29df72aefd0ec18c7204a7f05f85e2494e62c7f87
MD5 f76a51ee98c1dc328ab88b17e815d3be
SHA1 251e8e9463c7a5399db3d412d788fdbe5b565d37
SHA512 a7b95202295dbfe24f6f55827165681f7d3e84961545a7a95cfe0586df3e06517d052ceaf4e2bc7ca4124f9acd70a8d18029e48c048bb572d0e81f4abcd6792b
SSDEEP 768:EzsvRTYS/m6QFON/LbazVJ/lNSuycf8buR6ExXPYEgUDP+6G8/B8:Ezc+jFORXaR2ihxziF4
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

latrodectus

Detects Latrodectus 1 IoCs

Detects Latrodectus v1.4.

resource	yara_rule
sample	family_latrodectus_1_4

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28d0000.dll

IMPHASH db7aeb75528663639689f852fd366243
SHA256 4d7b0b80d4877bbff8c227c29df72aefd0ec18c7204a7f05f85e2494e62c7f87
MD5 f76a51ee98c1dc328ab88b17e815d3be
SHA1 251e8e9463c7a5399db3d412d788fdbe5b565d37
SHA512 a7b95202295dbfe24f6f55827165681f7d3e84961545a7a95cfe0586df3e06517d052ceaf4e2bc7ca4124f9acd70a8d18029e48c048bb572d0e81f4abcd6792b
SSDEEP 768:EzsvRTYS/m6QFON/LbazVJ/lNSuycf8buR6ExXPYEgUDP+6G8/B8:Ezc+jFORXaR2ihxziF4
MD5 SHA1 SHA512 SSDEEP

Minor OS version

2

Major OS version

5

Entry point

17284

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths