����
Static task
static1
Behavioral task
behavioral1
Sample
6d7afa4ad195ff68521698beb5f67159f394831db47098f551365cc6cb00d18d.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
6d7afa4ad195ff68521698beb5f67159f394831db47098f551365cc6cb00d18d.dll
Resource
win10v2004-20230703-en
General
-
Target
6d7afa4ad195ff68521698beb5f67159f394831db47098f551365cc6cb00d18d
-
Size
2.1MB
-
MD5
ee527e24b6263a3bb6baa5debe0d1581
-
SHA1
65b8cd0a22c08d52afc83c58a8803fa2bba35ac6
-
SHA256
6d7afa4ad195ff68521698beb5f67159f394831db47098f551365cc6cb00d18d
-
SHA512
7590980e92abbca8554dfb571057fcb16fed8858ffd8d31242fff3df59653eb2a630247ccb455f327b0844f5409c397710e1d8dc99f5a5eb450701daf2647621
-
SSDEEP
49152:5GQISWK1P0GdXTngpl4nluD2toX659HQHMOfBhiqZHLtZY:5ySJmGdDnu2IDI9HQHJvHRZY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d7afa4ad195ff68521698beb5f67159f394831db47098f551365cc6cb00d18d
Files
-
6d7afa4ad195ff68521698beb5f67159f394831db47098f551365cc6cb00d18d.dll windows x86
5256a32fcf8a4680ca46e201c3f94cbc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutPrepareHeader
ws2_32
inet_ntoa
kernel32
GetSystemDirectoryA
user32
CloseClipboard
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
SafeArrayDestroy
comctl32
ImageList_Destroy
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Exports
Exports
Sections
.text Size: 604KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ