Static task
static1
Behavioral task
behavioral1
Sample
e36c9f4e8c9d3fd54103ce803f1c76d5a7e5f36a5cd2a326b098cc113c839d5aN.dll
Resource
win10v2004-20240802-en
General
-
Target
e36c9f4e8c9d3fd54103ce803f1c76d5a7e5f36a5cd2a326b098cc113c839d5aN
-
Size
4KB
-
MD5
cb7ac78b42cd64e419b52fb98850f9a0
-
SHA1
d0083306fa90012b606ed64d16a6bd40740c3fbb
-
SHA256
e36c9f4e8c9d3fd54103ce803f1c76d5a7e5f36a5cd2a326b098cc113c839d5a
-
SHA512
403efe0d348b3921e4989bbac8046d2f96f05dbc6d2b988b761dd763755bf006771af052ac6ff4de75cafad6610896d71b03183292895a2e75a8cc825428a564
-
SSDEEP
48:i1Zf9zAZMpPRZIZWUcuqh/5WwaLEO0p0dSHGJRlbp:WbXEWfhWwIEO20d5t
Malware Config
Signatures
Files
-
e36c9f4e8c9d3fd54103ce803f1c76d5a7e5f36a5cd2a326b098cc113c839d5aN.dll windows:10 windows x64 arch:x64
Code Sign
4d:e5:a8:c7Certificate
IssuerCN=Tres Finocchiaro,OU=code.google.com/jzebra,O=jZebra Web Applet,L=Canastota,ST=New York,C=USNot Before01-06-2011 02:49Not After31-05-2016 02:49SubjectCN=Tres Finocchiaro,OU=code.google.com/jzebra,O=jZebra Web Applet,L=Canastota,ST=New York,C=US60:08:d2:04:ec:1e:ae:a8:4c:1f:10:58:aa:62:6c:9c:3a:de:00:ac:73:b2:36:64:8b:2d:77:b1:31:0d:72:9dSigner
Actual PE Digest60:08:d2:04:ec:1e:ae:a8:4c:1f:10:58:aa:62:6c:9c:3a:de:00:ac:73:b2:36:64:8b:2d:77:b1:31:0d:72:9dDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-core-namedpipe-l1-1-0.pdb
Exports
Exports
ConnectNamedPipe
CreateNamedPipeW
CreatePipe
DisconnectNamedPipe
GetNamedPipeClientComputerNameW
ImpersonateNamedPipeClient
PeekNamedPipe
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
Sections
.rdata Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ