ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
69a8a4c9ea54289ee7a5bb88ed4e06346e95921a67e8586e1a3fc6645515b3a6N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
69a8a4c9ea54289ee7a5bb88ed4e06346e95921a67e8586e1a3fc6645515b3a6N.dll
Resource
win10v2004-20240802-en
General
-
Target
69a8a4c9ea54289ee7a5bb88ed4e06346e95921a67e8586e1a3fc6645515b3a6N
-
Size
56KB
-
MD5
cc614260c726f2bcbaf2b86613771b20
-
SHA1
65e9e30b7903dbf84e659d3dfb5eee821da3bd15
-
SHA256
69a8a4c9ea54289ee7a5bb88ed4e06346e95921a67e8586e1a3fc6645515b3a6
-
SHA512
3b30e9f59dc20089c503a58c50da24555ae14fc7dd5e18b5c43221e121a56de335ff9cec43249dd03a3a7b7ea882c27d51b7a00817b4b7344b6a40d2afe435cb
-
SSDEEP
768:lqgDq3q1JZrRL7aPNAiTn41HVAHKV77JEmN9lTjaUrxka1+C6KRUf:n+3EJZ9/ahUHVAqUmJoa1BZR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69a8a4c9ea54289ee7a5bb88ed4e06346e95921a67e8586e1a3fc6645515b3a6N
Files
-
69a8a4c9ea54289ee7a5bb88ed4e06346e95921a67e8586e1a3fc6645515b3a6N.dll windows:5 windows x86 arch:x86
6dfbc160505aa2f7205766eaa6fe72a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CreateWindowExA
Exports
Exports
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 96B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 93B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ