Static task
static1
Behavioral task
behavioral1
Sample
autoinstall dll @powergirlso2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
autoinstall dll @powergirlso2.exe
Resource
win10v2004-20241007-en
General
-
Target
autoinstall dll @powergirlso2.exe
-
Size
6.5MB
-
MD5
d7f07f96a2b439380a488a0236cb1962
-
SHA1
6e7416590ccdfbb50326390ba2e8ff96bda136d5
-
SHA256
571081deb42c04988ea0ebb21f2ee71fc80f8ebda369746c16237e29e8efe213
-
SHA512
02fda092a672a8f51307b6522933287f0ec06addfcd7f879996bb885980cd74dd92213c822671ca6736f64aa092ddcddfb262693b1acd2fcefc9565bb4607291
-
SSDEEP
196608:lcV81a+1gS1eiKC36hpI4kR3fc6CzlqHPHQVpG+uT8c9Put86sYndN8bx0Gm11aY:lr1a+1gS1eiKC36hpI4kR3fc6CzlqHPg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource autoinstall dll @powergirlso2.exe
Files
-
autoinstall dll @powergirlso2.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ