Static task
static1
Behavioral task
behavioral1
Sample
8fcc8ec49fb36e8f8ee5a5fda1759102d92377e38a42ebba52a509c4f3d4e10eN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8fcc8ec49fb36e8f8ee5a5fda1759102d92377e38a42ebba52a509c4f3d4e10eN.dll
Resource
win10v2004-20241007-en
General
-
Target
8fcc8ec49fb36e8f8ee5a5fda1759102d92377e38a42ebba52a509c4f3d4e10eN
-
Size
5.0MB
-
MD5
9f62ab97b6e3be4bb10858baee893d40
-
SHA1
5d43086fbcdf9bd4027f095b019c8471799046b2
-
SHA256
8fcc8ec49fb36e8f8ee5a5fda1759102d92377e38a42ebba52a509c4f3d4e10e
-
SHA512
5658183f2d2aea686a63b4044e3d8b9fd049f3c839eeeb0fbdb835b12c8f7436315bcfa719c3299cf5696a3b7e4225cd99850126857cc8bfa36b31902a92ff2b
-
SSDEEP
49152:U+g3zfS04SziPe4DIJMVEDOA+KteGzuXdjvXgbhgvBE171nQ45vjLe7M9CgLgYGL:B99cMHArtfYeewDBLJgJIY2m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fcc8ec49fb36e8f8ee5a5fda1759102d92377e38a42ebba52a509c4f3d4e10eN
Files
-
8fcc8ec49fb36e8f8ee5a5fda1759102d92377e38a42ebba52a509c4f3d4e10eN.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 252KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ