CalcResult
Static task
static1
Behavioral task
behavioral1
Sample
87cb7b1a42d35261f00fbcae69c9ccb4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
87cb7b1a42d35261f00fbcae69c9ccb4.dll
Resource
win10v2004-20231215-en
General
-
Target
87cb7b1a42d35261f00fbcae69c9ccb4
-
Size
121KB
-
MD5
87cb7b1a42d35261f00fbcae69c9ccb4
-
SHA1
1b80d332cb6d2594f71e88bf89ebb25fd81355ae
-
SHA256
5aa0458c44d9bb62ec04ac50a5c9af702411b75d4b9b0892dce166cdf6b9acd1
-
SHA512
18e1e722c8c843fe7191721df4c58534baa60d265db123d1a5cf2797e7a692af241f649362cf4b565dd54f4b47769e7bd35bc7048cb2566d9d6560797a932e66
-
SSDEEP
1536:dzU+XV8/B2Wl09PwcqzdueJtxKvvNSTCqjw3k6u/VeMFq85ZU9:6+/y/pTbxBdEMF/5Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87cb7b1a42d35261f00fbcae69c9ccb4
Files
-
87cb7b1a42d35261f00fbcae69c9ccb4.dll windows:5 windows x86 arch:x86
039124c5bc73534ea63a2fe3976ba4e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowWindow
SetWindowLongA
GetWindowLongA
GetSystemMetrics
GetWindowRect
GetWindowThreadProcessId
GetClassNameA
GetWindowTextA
MoveWindow
IsWindowVisible
GetWindow
GetDesktopWindow
FindWindowExA
IsWindow
SendMessageA
GetClientRect
FindWindowA
GetForegroundWindow
wininet
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetReadFile
shell32
ShellExecuteA
ws2_32
WSACleanup
closesocket
recv
send
connect
htons
gethostbyname
socket
WSAStartup
kernel32
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
InterlockedDecrement
Sleep
CreateFileA
GetCurrentProcessId
VirtualProtect
GetProcAddress
LoadLibraryA
WideCharToMultiByte
ReadProcessMemory
OpenProcess
OutputDebugStringA
CloseHandle
CreateThread
GetComputerNameA
FindFirstFileA
GetSystemTime
GetShortPathNameA
Module32First
CreateToolhelp32Snapshot
Process32Next
Process32First
GetLastError
CreateMutexA
GetModuleFileNameA
GetModuleHandleA
SetLastError
VirtualAlloc
VirtualFree
IsBadReadPtr
FreeLibrary
HeapFree
GetProcessHeap
HeapAlloc
GetNativeSystemInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapReAlloc
MultiByteToWideChar
GetCurrentThreadId
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
Exports
Exports
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ