DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
193.143.1.205.dll
Resource
win7-20240903-en
General
-
Target
193.143.1.205.dll.exe
-
Size
536KB
-
MD5
c149a09ee03ead1dc80f0b6e066cf92e
-
SHA1
000287ba71c1187437f0b2537becb2d3b2780525
-
SHA256
f3677f29dee7338da89321564757caa15ce0c50f85540977b7470bf3a6ca0d2c
-
SHA512
8de97894f3fc565b5d872dad9bb97c6a6b20f4cd015bbf7a1e3e9a913ff86522498fbe62a894389d274059f6d9a52be2709424c0159b26c3c21d72d5f27142b0
-
SSDEEP
12288:66QxzjqApsOwedBWOOKHF5PSaqfEVne2oesiWHWOB:hQxxXOqF5IjlUO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 193.143.1.205.dll.exe
Files
-
193.143.1.205.dll.exe.dll regsvr32 windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 398KB - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ