a
Static task
static1
Behavioral task
behavioral1
Sample
9065369f6ed79617d0c3a42ea7e1b6e3b40a7ea72ce7618d4a24aa3ac2ca86cf.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9065369f6ed79617d0c3a42ea7e1b6e3b40a7ea72ce7618d4a24aa3ac2ca86cf.dll
Resource
win10v2004-20230915-en
General
-
Target
9065369f6ed79617d0c3a42ea7e1b6e3b40a7ea72ce7618d4a24aa3ac2ca86cf
-
Size
1.9MB
-
MD5
9cf8345ddfc0fe86ed06e26bda472845
-
SHA1
f08b96dfa188d5d1a4315f49fa397ac7d7a72ac5
-
SHA256
9065369f6ed79617d0c3a42ea7e1b6e3b40a7ea72ce7618d4a24aa3ac2ca86cf
-
SHA512
0b83c2354e81e7f4c899cc1a6874a506c54dcd211c72474366a39a6cdd25c5a8634d967026f741d5ffc1b289145106f2b70da18e3aca4a405739b1d5a184d834
-
SSDEEP
49152:WH8Ok0iOCHXWSBPM1xJ2qQLOJN3UrdH+jitonxyRFHZ:C8XOlSM13XP3Url+jitYxybZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9065369f6ed79617d0c3a42ea7e1b6e3b40a7ea72ce7618d4a24aa3ac2ca86cf
Files
-
9065369f6ed79617d0c3a42ea7e1b6e3b40a7ea72ce7618d4a24aa3ac2ca86cf.dll windows:4 windows x86
c0f4e0e16c3ec49d46108b44a5b562c5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
TerminateProcess
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
VirtualAllocEx
IsBadReadPtr
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
RtlMoveMemory
RtlZeroMemory
HeapFree
GetComputerNameA
ws2_32
gethostbyname
inet_ntoa
recv
select
send
WSAStartup
htons
connect
socket
inet_addr
closesocket
WSACleanup
msvcrt
strncmp
__CxxFrameHandler
free
memmove
malloc
strchr
floor
sprintf
atoi
_ftol
??3@YAXPAX@Z
strrchr
??2@YAPAXI@Z
_CIfmod
strncpy
modf
user32
MessageBoxA
wsprintfA
advapi32
RegQueryValueExA
RegOpenKeyA
RegCloseKey
Exports
Exports
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yvJzAO0 Size: 1.8MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ