DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e9049c869fbeb3f0fbfea1fa65de1e5363e0a1070d2b52b0fc7af5467e315e88.dll
Resource
win7-20241010-en
General
-
Target
e9049c869fbeb3f0fbfea1fa65de1e5363e0a1070d2b52b0fc7af5467e315e88.exe
-
Size
136KB
-
MD5
fae7ce1aef2d673ebdb627dfd9271cf3
-
SHA1
fffca2a8661a14e8677073596944938ad8b97dc6
-
SHA256
e9049c869fbeb3f0fbfea1fa65de1e5363e0a1070d2b52b0fc7af5467e315e88
-
SHA512
0e61d452a0efde934597213e303581fb54b7459ed3b9aac84ca67bdee625f9c07d616d8eca2dfa040d5aa4dd27a1dfbcd4a7a2613aabd5ea90d8cfb8c7ccc4eb
-
SSDEEP
3072:1C637rL6QG31SK33KTBHXG1pyFEhY35qPhvcjGbI1k3UzN:1+X1r3qVG1pyFE635WvG/yUz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e9049c869fbeb3f0fbfea1fa65de1e5363e0a1070d2b52b0fc7af5467e315e88.exe
Files
-
e9049c869fbeb3f0fbfea1fa65de1e5363e0a1070d2b52b0fc7af5467e315e88.exe.dll regsvr32 windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ