Static task
static1
Behavioral task
behavioral1
Sample
pifmgr.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
pifmgr.dll
Resource
win10v2004-20240802-en
General
-
Target
3b4eb8f788e09ac23746ad330376ae5990e2af4512d93cd2b865ad7f68569c73N
-
Size
8KB
-
MD5
47a076bf0892c1889e5941b93483ffd0
-
SHA1
47be2ab01f6b6b794b45d9a26132b0b5b4a7384b
-
SHA256
3b4eb8f788e09ac23746ad330376ae5990e2af4512d93cd2b865ad7f68569c73
-
SHA512
ab0d78f2c6a21c1854b625bb5b703a0ac6f3f05584920801c4846efcfc1bc5c3e08e91d7465d63999d62c169c183a748e65477b87c5223ef8a0cc3cd6a223f5f
-
SSDEEP
192:e4nqbHM81fmE+kDPbeXLbjboyKY5xaAi3cS3k:e4qA8wElOLzoy/5xaH0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/pifmgr.dll
Files
-
3b4eb8f788e09ac23746ad330376ae5990e2af4512d93cd2b865ad7f68569c73N.cab
-
pifmgr.dll.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ