Static task
static1
Behavioral task
behavioral1
Sample
b00fc3c3917575ed1594098caf97c3d052f831c7c3181ae63fb615e969d0ca9b.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b00fc3c3917575ed1594098caf97c3d052f831c7c3181ae63fb615e969d0ca9b.dll
Resource
win10v2004-20230915-en
General
-
Target
b00fc3c3917575ed1594098caf97c3d052f831c7c3181ae63fb615e969d0ca9b
-
Size
265KB
-
MD5
b67531a02385e8dcaeb57640371e86d2
-
SHA1
0dadafe99211756907f30d0f3a7273f35fea2513
-
SHA256
b00fc3c3917575ed1594098caf97c3d052f831c7c3181ae63fb615e969d0ca9b
-
SHA512
1862c46c698980f603628b31e8f766b19fe524240a347e5ab3800be29b21e5af07ca6d33a2f433348f55d7841c4971865889059cc90b8c2ed61622f7b40795d8
-
SSDEEP
6144:XW3vmVEjXvaOvldharSMeEVjOe4AONGyEM/J:m3vAEjvaIdI+Y89/J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b00fc3c3917575ed1594098caf97c3d052f831c7c3181ae63fb615e969d0ca9b
Files
-
b00fc3c3917575ed1594098caf97c3d052f831c7c3181ae63fb615e969d0ca9b.dll windows:6 windows x86
9e0cb9e88f30729a1a349ca20527d9d6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
closesocket
connect
htons
inet_addr
recv
send
setsockopt
gethostbyname
WSAStartup
socket
inet_ntoa
kernel32
GetProcAddress
GetProcessHeap
FreeLibrary
IsBadReadPtr
TerminateProcess
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
CloseHandle
RaiseException
DecodePointer
DeleteCriticalSection
HeapAlloc
GetModuleFileNameW
FindClose
GetFileAttributesW
DeleteFileW
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
CreateFileW
SetEndOfFile
SetFilePointer
WriteFile
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetFilePointerEx
GetNativeSystemInfo
LoadLibraryA
VirtualAlloc
VirtualFree
SetLastError
GetConsoleCP
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapFree
VirtualProtect
GetOEMCP
GetCommandLineA
WriteConsoleW
ReadConsoleW
GetConsoleMode
ReadFile
GetACP
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetModuleFileNameA
ExitProcess
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
GetCommandLineW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
OutputDebugStringW
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
EncodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
user32
MessageBoxW
wsprintfW
shlwapi
PathRemoveFileSpecW
wininet
InternetCloseHandle
InternetOpenW
InternetConnectW
InternetReadFile
HttpOpenRequestA
HttpOpenRequestW
HttpAddRequestHeadersA
HttpSendRequestA
HttpSendRequestW
HttpQueryInfoA
InternetConnectA
HttpQueryInfoW
winhttp
WinHttpCloseHandle
WinHttpOpen
WinHttpConnect
WinHttpReceiveResponse
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpQueryHeaders
WinHttpSetOption
Sections
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ