Static task
static1
Behavioral task
behavioral1
Sample
568baeb21df2890ba9b8856ca03b4a7c80cb3e578c6570c3fe84f21f3baf67c6.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
568baeb21df2890ba9b8856ca03b4a7c80cb3e578c6570c3fe84f21f3baf67c6.dll
Resource
win10v2004-20231215-en
General
-
Target
a602c1cfb2ed4720d25a42357c46953f.bin
-
Size
2.0MB
-
MD5
78ce83e1c12caad6d554c221820dc54e
-
SHA1
8b6d4a5c5ee088dbb7f217631af33f90e713f18c
-
SHA256
d50ecb87abc684ba7aee889620b3a642dde5de655bd56a469cb85084fc569890
-
SHA512
45d954620a3d19722ef4c62bb1357f0ab5c9e3a0bf50f670cead08f4867722a93c8c80c14adb915b7af665370d2734cf44a404c4bb824b842adb69ba810f26a5
-
SSDEEP
49152:r8bSUgGtxROiAquZyLNFiSJjodzRNSKt+KI3sy:r8fj9OjquUx3JjoBRNSKt+K6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/568baeb21df2890ba9b8856ca03b4a7c80cb3e578c6570c3fe84f21f3baf67c6.dll
Files
-
a602c1cfb2ed4720d25a42357c46953f.bin.zip
Password: infected
-
568baeb21df2890ba9b8856ca03b4a7c80cb3e578c6570c3fe84f21f3baf67c6.dll.dll windows:5 windows x86 arch:x86
Password: infected
d67c3a0cef57c41c2fd6d0be4132ed67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateTimerQueueTimer
EnumResourceTypesA
OutputDebugStringA
CloseHandle
LoadLibraryW
GetACP
QueryPerformanceCounter
GetTickCount
LoadLibraryExW
GetModuleFileNameW
GetBinaryTypeW
CreateEventA
SetStdHandle
WaitForSingleObjectEx
DeleteCriticalSection
SetConsoleMode
setupapi
SetupDiEnumDeviceInfo
gdi32
GdiFlush
SetMapperFlags
advapi32
DeleteService
rpcrt4
RpcIfInqId
shell32
SHCreateShellItem
user32
ShowWindow
GetDC
GetLastInputInfo
PtInRect
ws2_32
WSAGetLastError
oleaut32
GetRecordInfoFromGuids
SafeArrayCreate
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 992KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 696KB - Virtual size: 694KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CONST Size: 364KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ