Managed XDR

c-windows-system32-0qx4iaiq9.dll — malware analysis report

File info

Filename
c-windows-system32-0qx4iaiq9.dll
File type
PE32 executable (GUI) Intel 80386, for MS Windows
File size
350 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
276da80f9858bba309a2a870ae4340edb2ee178c
SHA256
afd668ad5845bf7d3ccda07a7dfd623ce5cfff094989edb14e32252d203b00d7
MD5
76bc599f80bd0de1dfaa996828576ae1

Signatures

Defense Evasion

T1027.002 unnamed_memory_regions: Code was executed in unnamed regions
T1027.002 packer_entropy: Probably contains compressed or encrypted data

Other

yara_rules: Static rules
dead_host: Connects to IP addresses that do not respond to requests
no_graphical_activity: No graphic activity
has_pdb: This executable file has a PDB path