element
Static task
static1
Behavioral task
behavioral1
Sample
d0b4c91c3c848d8230bac2eb5096948d9ecab0b2329147e94ba1f446ed3ee5ee.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d0b4c91c3c848d8230bac2eb5096948d9ecab0b2329147e94ba1f446ed3ee5ee.dll
Resource
win10v2004-20230915-en
General
-
Target
d0b4c91c3c848d8230bac2eb5096948d9ecab0b2329147e94ba1f446ed3ee5ee
-
Size
855KB
-
MD5
cd961d2f6efddaaa0b78d13b1dc471ff
-
SHA1
ac5b954a4ddc0cb37b600b576d6a207a0fefa861
-
SHA256
d0b4c91c3c848d8230bac2eb5096948d9ecab0b2329147e94ba1f446ed3ee5ee
-
SHA512
ea0822a1ea0181b00e1ab567929e1d1bf871cdb62e890c164845242db4964cdfc45541c4e3a9f696ff13e020aae2d09f00720d030bac751736a549c5d0a04921
-
SSDEEP
24576:QL6IrZZJpCS7fZ0S6cHKNPO+eB6xZaaCAk51++x9aX5ZXONz:g/Vfp6xNPO+eBaap590XG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0b4c91c3c848d8230bac2eb5096948d9ecab0b2329147e94ba1f446ed3ee5ee
Files
-
d0b4c91c3c848d8230bac2eb5096948d9ecab0b2329147e94ba1f446ed3ee5ee.dll windows:5 windows x86
50e263b56c66b50b6b4efa41e8685ff5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc100
ord10922
msvcr100
??0exception@std@@QAE@ABQBDH@Z
kernel32
GetCurrentProcessId
user32
PostMessageA
msvcp100
?_Xlength_error@std@@YAXPBD@Z
hpsocket
HP_Destroy_TcpPullClient
dbghelp
MiniDumpWriteDump
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Exports
Exports
Sections
.text Size: 18KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 829KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ