Static task
static1
Behavioral task
behavioral1
Sample
amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_10.0.22000.2245_none_d4a9256e15737e26_crypt32.d.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_10.0.22000.2245_none_d4a9256e15737e26_crypt32.d.dll
Resource
win10v2004-20230915-en
General
-
Target
3C7D649031C8CAD12D13D8E433B03D8E.zip
-
Size
471KB
-
MD5
2d4049722438f0ed7f9513b80ea84386
-
SHA1
da65d7d34ceeb0cf7f183a1aa19354730ba988d5
-
SHA256
365a0670b1f75a599f818b135993565b34cf4ee4feb58270623334baf79e042d
-
SHA512
b0ca44fcc90bbf504a40416e9ba3a450b36383e4dc1bb849f383919f036c50806391d8862ee991e8a0fd85b7eafa31c1c6933f29b749731c2886b0100d51bbef
-
SSDEEP
12288:ov+hZEw57YzhUQFr/7ElSs5np268Cr9XHCwbwmxjFVHioT3:UiZE1zhxFbwRnpvLr5iB+jFV5T3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_10.0.22000.2245_none_d4a9256e15737e26_crypt32.dll.mun_4268f83d/amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_10.0.22000.2245_none_d4a9256e15737e26_crypt32.dll.mun_4268f83d
Files
-
3C7D649031C8CAD12D13D8E433B03D8E.zip.zip
Password: infected
-
amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_10.0.22000.2245_none_d4a9256e15737e26_crypt32.dll.mun_4268f83d/amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_10.0.22000.2245_none_d4a9256e15737e26_crypt32.dll.mun_4268f83d.dll windows:10 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 724KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
details.json