Static task
static1
Behavioral task
behavioral1
Sample
6f77680bd0773b2c76406195aa33eb23fd2b4f409d3dccb78a4737c20c0758b8.dll
Resource
win7-20230712-en
General
-
Target
6f77680bd0773b2c76406195aa33eb23fd2b4f409d3dccb78a4737c20c0758b8
-
Size
299KB
-
MD5
6e181fe5091721e07cfb6150f94e3b16
-
SHA1
4f6e690bc16856249cdbde121d007f7748c2dafd
-
SHA256
6f77680bd0773b2c76406195aa33eb23fd2b4f409d3dccb78a4737c20c0758b8
-
SHA512
1c9f87b50fb340db14f404111cebf8b01a3cf9cc5795edb6855afa1fa9a54445d692610bff51b6753feb01743aa23cc825f5fe1e6c107285e269b80fa1cbfc68
-
SSDEEP
6144:Mszj4kdmVXtO+ofngVeyytZlz5dnYAm/rTOyLq+HBunTBSqMcAO0X9:/jj2OPfgEyytZlz/WOyexnTg7cy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f77680bd0773b2c76406195aa33eb23fd2b4f409d3dccb78a4737c20c0758b8
Files
-
6f77680bd0773b2c76406195aa33eb23fd2b4f409d3dccb78a4737c20c0758b8.dll windows x86
81f5f754fc68aa32643161fd055703ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ole32
CoUninitialize
winhttp
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpOpen
WinHttpAddRequestHeaders
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSendRequest
WinHttpConnect
WinHttpCrackUrl
shell32
ShellExecuteExA
advapi32
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RevertToSelf
AccessCheck
SetSecurityDescriptorOwner
AllocateAndInitializeSid
ImpersonateSelf
IsValidSecurityDescriptor
OpenProcessToken
FreeSid
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
AddAccessAllowedAce
OpenThreadToken
user32
EnumWindows
GetWindowTextA
CharLowerBuffA
netapi32
Netbios
kernel32
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointerEx
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
IsBadReadPtr
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
EnumSystemLocalesW
GetUserDefaultLCID
GetSystemFirmwareTable
VirtualProtect
HeapFree
SetLastError
VirtualFree
GetCurrentProcess
WriteFile
VirtualAlloc
CreateMutexA
WaitForSingleObject
LocalAlloc
CreateFileW
UnmapViewOfFile
MultiByteToWideChar
Sleep
GetLastError
OpenMutexA
GetCurrentThread
LoadLibraryA
CloseHandle
GetNativeSystemInfo
CreateThread
HeapAlloc
GetProcAddress
CreateFileMappingA
LocalFree
GetProcessHeap
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
WriteConsoleW
MapViewOfFile
GetTickCount
GetComputerNameA
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsValidLocale
RtlUnwind
RaiseException
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapReAlloc
GetStdHandle
GetFileType
LCMapStringW
GetLocaleInfoW
Sections
.text Size: 201KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ