D
Static task
static1
Behavioral task
behavioral1
Sample
268bcc7d59ba434233cf069bc98292e0ed62ae505319fa0d361300ecb9f86b9f.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
268bcc7d59ba434233cf069bc98292e0ed62ae505319fa0d361300ecb9f86b9f.dll
Resource
win10v2004-20231023-en
General
-
Target
268bcc7d59ba434233cf069bc98292e0ed62ae505319fa0d361300ecb9f86b9f
-
Size
960KB
-
MD5
ebbd296b964d9e364cc81444dd487356
-
SHA1
c13eb6a227e799a31b3ac3039fcd534032592b5d
-
SHA256
268bcc7d59ba434233cf069bc98292e0ed62ae505319fa0d361300ecb9f86b9f
-
SHA512
a659cc50121db768613087b60e61bc02065bc2bb9f61e0c7bfe77e5ef6aafc22f7c7040e42519938daf9a37d0424dd4cbf08d4354f012f5dd3328ad066eaa5ce
-
SSDEEP
24576:JXC/EzGprt9/JMfloYHOgDjdJyAs0UON9DJ0ArymbpjIL:JUEzeXJMflbHXmKxGmd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 268bcc7d59ba434233cf069bc98292e0ed62ae505319fa0d361300ecb9f86b9f
Files
-
268bcc7d59ba434233cf069bc98292e0ed62ae505319fa0d361300ecb9f86b9f.dll windows:5 windows x86
4ec22a0af24ff9921128c67062af55a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Module32Next
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetWindowThreadProcessId
ws2_32
WSAStartup
msvcrt
sprintf
shell32
SHGetSpecialFolderPathA
Exports
Exports
Sections
.text Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SPW Size: 484KB - Virtual size: 483KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pGI Size: 4KB - Virtual size: 764B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.?T^ Size: 308KB - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ