Static task
static1
Behavioral task
behavioral1
Sample
d01d76e166d7289c39041aa500d82860.dll
Resource
win7-20231023-en
General
-
Target
d01d76e166d7289c39041aa500d82860.bin
-
Size
120KB
-
MD5
d01d76e166d7289c39041aa500d82860
-
SHA1
6a639035bca9352fce024706177f067546346ea8
-
SHA256
82d571d9054e71cde53cc1f88973419dc4e249ee720e8f3aa52875ac83fbb2ac
-
SHA512
f76397403d651d3b207d8c08acdb72e4a9b77c4d6f9d70b158bbbf6e7f5738c81ed42d1288ef8942d43c27172998673704ae014633deca6880a28d1f207226e4
-
SSDEEP
3072:nwc9NfII+SrhREx2jsLuxY7x3on3uTWxP:n/9NfIIPrhRljsLt7x3oneTWx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d01d76e166d7289c39041aa500d82860.bin
Files
-
d01d76e166d7289c39041aa500d82860.bin.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ