DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d17ade8be9670eafb9ae17f56f5b56393265da03a8c9ddcdc08dbc923ecd4a8b.dll
Resource
win7-20240729-en
General
-
Target
d17ade8be9670eafb9ae17f56f5b56393265da03a8c9ddcdc08dbc923ecd4a8b
-
Size
136KB
-
MD5
2e530264f9b04fca4c1140dfe1980fda
-
SHA1
b5f0516d558ccea5c565573c98f833ad064d7480
-
SHA256
d17ade8be9670eafb9ae17f56f5b56393265da03a8c9ddcdc08dbc923ecd4a8b
-
SHA512
292766a2c0da5d722e2b6c52499cc2ea06f0a87df4abf7f6f1bbd6a9099082e15a226df77b5cdc21a0c7ae9590338ada1a8264c5543b583691311a6f0a333a4e
-
SSDEEP
3072:wjctyfF6eP9BrBVliD9NbMMiiQKtyDr1v8lArgXHhhW94:wjtwWZBVI9R/iiQKtUZv8MsHh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d17ade8be9670eafb9ae17f56f5b56393265da03a8c9ddcdc08dbc923ecd4a8b
Files
-
d17ade8be9670eafb9ae17f56f5b56393265da03a8c9ddcdc08dbc923ecd4a8b.dll regsvr32 windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ