DefortHeksW
Static task
static1
Behavioral task
behavioral1
Sample
d9a52dcd6de626eb950e606826c89e5f8bdb5dad717c3fd8f610e09f55fec0a7.dll
Resource
win7-20241010-en
General
-
Target
d9a52dcd6de626eb950e606826c89e5f8bdb5dad717c3fd8f610e09f55fec0a7.exe
-
Size
508KB
-
MD5
8986d2586f15b71b9a77f6846ffcbc8c
-
SHA1
5c78597eccd04f70c02ad9345a686ebd80d972d9
-
SHA256
d9a52dcd6de626eb950e606826c89e5f8bdb5dad717c3fd8f610e09f55fec0a7
-
SHA512
2bf46fcc3404e2a773bbd1b40ee093a52ada7fb67757439e1f05c0218320c481d646e63a40f4a4112338664697dce5ed348e58d98ddc25dec8358a33b4258a24
-
SSDEEP
12288:rMGeVRE83xVOESLawOVP6hO9724GpBb33:rMGeVe83xVOKchO97SpR33
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d9a52dcd6de626eb950e606826c89e5f8bdb5dad717c3fd8f610e09f55fec0a7.exe
Files
-
d9a52dcd6de626eb950e606826c89e5f8bdb5dad717c3fd8f610e09f55fec0a7.exe.dll windows:6 windows x86 arch:x86
e4354d92e4ab82c15bc7e347b14d1d7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnterCriticalSection
WaitForSingleObject
DeleteCriticalSection
GetLastError
CreateFileA
WaitForMultipleObjects
WideCharToMultiByte
LeaveCriticalSection
InitializeCriticalSection
Sleep
GetProcAddress
LoadLibraryA
Exports
Exports
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tdata Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ