Static task
static1
Behavioral task
behavioral1
Sample
a6e563e210d90cfd84afa199a92cc96ab459081a6447b52f8fe5a9b39bf69a8fN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a6e563e210d90cfd84afa199a92cc96ab459081a6447b52f8fe5a9b39bf69a8fN.dll
Resource
win10v2004-20241007-en
General
-
Target
a6e563e210d90cfd84afa199a92cc96ab459081a6447b52f8fe5a9b39bf69a8fN
-
Size
134KB
-
MD5
25da249c75050b8d1de57782b81636d0
-
SHA1
08b696b4132e724edb8821aa1542c441d11a678e
-
SHA256
a6e563e210d90cfd84afa199a92cc96ab459081a6447b52f8fe5a9b39bf69a8f
-
SHA512
8b82c3611ce9cd51aae347ead2d43b099b44b5524324b41c74bb0da173e7a9b83e73441144bdad037dad167e20acf3bb86965a9ffc592b8ef5701cbdb2bbd2ef
-
SSDEEP
3072:JKoAF8oJFWqxz6nktiwBMzM3sq/tJSHAhBiUejMV:EPFWBktn3sBABiUejc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6e563e210d90cfd84afa199a92cc96ab459081a6447b52f8fe5a9b39bf69a8fN
Files
-
a6e563e210d90cfd84afa199a92cc96ab459081a6447b52f8fe5a9b39bf69a8fN.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 200KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vbzgrrjs Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tmpkblhd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tmpkblhd Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE