Static task
static1
Behavioral task
behavioral1
Sample
025b708bc38136cf6468b2c4d2c04768.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
025b708bc38136cf6468b2c4d2c04768.dll
Resource
win10v2004-20231222-en
General
-
Target
025b708bc38136cf6468b2c4d2c04768
-
Size
51KB
-
MD5
025b708bc38136cf6468b2c4d2c04768
-
SHA1
de7efd22194e724718ff24819e7ec446ebdbf79f
-
SHA256
e5d0c0260cf8193434559324cef4db6ae49b461180b62dcf0e11889bdbb7cbc8
-
SHA512
b98ee5c62277feb3c2426759565fe3404b370e5d2fc3d8211608ccb60a66d4a3b26d0bea3a3e91bb9596698afebfafc793061f6b006b418a005c6de7461936d4
-
SSDEEP
768:nXPzk88VR5eiDwRYkulb2Ba9g3ZuVZp15ntv9grCezYRKiN2lQJfOnv3Qm:X7kbfxw+l0J61RtuNi7Jf43x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 025b708bc38136cf6468b2c4d2c04768
Files
-
025b708bc38136cf6468b2c4d2c04768.dll windows:4 windows x86 arch:x86
115619a453e7cb8083bac2981fda9322
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvbvm60
__vbaFixstrConstruct
__vbaFileSeek
__vbaExceptHandler
__vbaAryRecMove
__vbaForEachCollAd
__vbaAryRecCopy
user32
ShowWindow
SetCursor
OemToCharA
LoadBitmapA
GetCursor
EndDialog
DestroyCursor
CreateMDIWindowA
CreateDesktopA
dsound
DirectSoundFullDuplexCreate
DirectSoundEnumerateA
DirectSoundCreate8
shell32
ShellExecuteW
SHGetMalloc
SHGetFileInfoA
SHGetDesktopFolder
ShellExecuteExW
SHGetPathFromIDListA
advapi32
RegOpenKeyExA
RegEnumKeyA
kernel32
CloseHandle
FlushFileBuffers
GetCommandLineA
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
SetEndOfFile
ExitProcess
wininet
FindCloseUrlCache
FindFirstUrlCacheEntryA
FindFirstUrlCacheGroup
FindNextUrlCacheGroup
HttpAddRequestHeadersA
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetCanonicalizeUrlA
InternetCheckConnectionA
InternetCloseHandle
InternetConnectA
InternetCrackUrlA
InternetGetCookieA
InternetGetLastResponseInfoA
InternetGoOnlineA
InternetQueryDataAvailable
InternetSetFilePointer
InternetSetOptionExA
InternetWriteFile
Sections
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ