Static task
static1
Behavioral task
behavioral1
Sample
801bf63094df87eb01697f5cea78d49a70a81457b8f1eb8ef7ed2c6d36f0bd06.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
801bf63094df87eb01697f5cea78d49a70a81457b8f1eb8ef7ed2c6d36f0bd06.dll
Resource
win10v2004-20230915-en
General
-
Target
801bf63094df87eb01697f5cea78d49a70a81457b8f1eb8ef7ed2c6d36f0bd06
-
Size
12.0MB
-
MD5
b017db8857ccb22e288235ff5419f6f7
-
SHA1
82b455941a035d6bd02d23d8231a444c5287b5d1
-
SHA256
801bf63094df87eb01697f5cea78d49a70a81457b8f1eb8ef7ed2c6d36f0bd06
-
SHA512
42a551d8714772b949347903e2caefb7d55df4178de8ab5274d3543a876e0393e488fb4b1c40495b0e2f89df10a3901193cf85d429627d285d8b412d5c264912
-
SSDEEP
196608:6nsANQxIt4dQmFeY0ZGVvM6FaMzfAFA7cmuvwxr7WYxj60pwdzSUt39kxT2kYsBc:AQxTQ1/0lM6FrYFA7cmuv67We6gYz/I0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 801bf63094df87eb01697f5cea78d49a70a81457b8f1eb8ef7ed2c6d36f0bd06
Files
-
801bf63094df87eb01697f5cea78d49a70a81457b8f1eb8ef7ed2c6d36f0bd06.dll windows:6 windows x86
eef9a3fc72b639e5563f1630f256c0e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SendMessageW
ws2_32
recv
netapi32
Netbios
ntdll
NtQueryInformationProcess
Sections
.text Size: - Virtual size: 565KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.A;* Size: - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.\u. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bL! Size: 11.9MB - Virtual size: 11.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ