�߳�DLLע��
Static task
static1
Behavioral task
behavioral1
Sample
35e863018d1f0edf7e9c0fb4b2ca13138a079ffe39b01b483767a826e435faa2.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
35e863018d1f0edf7e9c0fb4b2ca13138a079ffe39b01b483767a826e435faa2.dll
Resource
win10v2004-20241007-en
General
-
Target
35e863018d1f0edf7e9c0fb4b2ca13138a079ffe39b01b483767a826e435faa2
-
Size
2.2MB
-
MD5
038ed61c03c9a2287a2fd00c72ef0f95
-
SHA1
1c419782f9bbe4c88cc3520d6a3d7f53ce55d6e5
-
SHA256
35e863018d1f0edf7e9c0fb4b2ca13138a079ffe39b01b483767a826e435faa2
-
SHA512
4e085963528895ec3b96dbf74b3eae943677e934177069b96e41cc0b34fb389db02ab4afe160ebf0153f8c5aa1591cd30d176a1e371be6daab91d5964b65e835
-
SSDEEP
49152:BYOyv5ZGANVy23PykB3OZSnr5nQASrL6iPNI5:byxZ1NVywPykxZWASrLHPNC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35e863018d1f0edf7e9c0fb4b2ca13138a079ffe39b01b483767a826e435faa2
Files
-
35e863018d1f0edf7e9c0fb4b2ca13138a079ffe39b01b483767a826e435faa2.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 14.2MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ