DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d1a35f2cf986a3a03ef87ce0c4c1ca13b27a79d2d4975f1658bf7c6156fda7af.dll
Resource
win7-20241023-en
General
-
Target
4b8d572f4d087b931c6304b70208bcd3.bin
-
Size
444KB
-
MD5
cac663a1053dc84ae7f08a2e059c0f85
-
SHA1
3508c3cc838753faa19174bf9b338116139dba2d
-
SHA256
3462af2a8897f4264ac0d628ffe707d348517b25819ad7fcb9b776b90d87184a
-
SHA512
2d9f67ecf9c3c2b2dc36f28810956ff69a40c544b92f0c5a6c1567285887bce2e8f33ba889efc0101a5d63c773964ee2af081fb5b55c21b396d1aa98dd2b2b1b
-
SSDEEP
12288:Iv8m5ey/Eht20k2uQvpsAVlI5wfqfBWuFuVDJspS4N:IvF5eyMjg2jvpsAVW0WWuFuVo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d1a35f2cf986a3a03ef87ce0c4c1ca13b27a79d2d4975f1658bf7c6156fda7af.exe
Files
-
4b8d572f4d087b931c6304b70208bcd3.bin.zip
Password: infected
-
d1a35f2cf986a3a03ef87ce0c4c1ca13b27a79d2d4975f1658bf7c6156fda7af.exe.dll regsvr32 windows:6 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 433KB - Virtual size: 433KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ