DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d36dcbc4f984db623d1043c72c404030f849b16b882073fe94b15bd148394182N.dll
Resource
win7-20240903-en
General
-
Target
d36dcbc4f984db623d1043c72c404030f849b16b882073fe94b15bd148394182N.exe
-
Size
397KB
-
MD5
6e0c8c9ff6cab93e5c2d7821e43d9f80
-
SHA1
e5a325f30c1a79f6ff063c0f186d17ec3bd62e5b
-
SHA256
d36dcbc4f984db623d1043c72c404030f849b16b882073fe94b15bd148394182
-
SHA512
fce63524f169869d9bcf8df60b69adb6018ef9d8de87824bd0b764eb5073a128ec549b23799c660741cdf630e1ce91b1920e6eadee52d67dd7fc9bed46e69d97
-
SSDEEP
12288:bwnhEUzF1WXfe9cNnIncTRcq9CDFFiC8vE:bwnhE+F1h9oPPwF0CME
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d36dcbc4f984db623d1043c72c404030f849b16b882073fe94b15bd148394182N.exe
Files
-
d36dcbc4f984db623d1043c72c404030f849b16b882073fe94b15bd148394182N.exe.dll regsvr32 windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 354KB - Virtual size: 354KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ