fx
Static task
static1
Behavioral task
behavioral1
Sample
00abd168dddf5575137f1b8646aaeca6.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00abd168dddf5575137f1b8646aaeca6.dll
Resource
win10v2004-20231215-en
General
-
Target
00abd168dddf5575137f1b8646aaeca6
-
Size
14KB
-
MD5
00abd168dddf5575137f1b8646aaeca6
-
SHA1
dc537bd09a2b1bf18e7ec7c9489e4d88c09fb3a8
-
SHA256
817b27d71a1ba96cb9a681108038a221652da66d530e6738ff7b192998a773b7
-
SHA512
ff540def2b77b9e1a39b9c611e914481111814162ef8f3c9602b2c428e00413ddc3c8d8f6fb9340e8b52507f04f98c05df2074220b1b7c7af10ec05e4bd923fc
-
SSDEEP
384:EdIQFn+taUGzBERAERhq2WqQOzXpwKfYhQ:F0wHWq9z5wKfkQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00abd168dddf5575137f1b8646aaeca6
Files
-
00abd168dddf5575137f1b8646aaeca6.dll windows:4 windows x86 arch:x86
3e60f9234ae03aa8e7bc72d4b2da9253
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
ReadProcessMemory
GetCurrentProcess
GetCurrentProcessId
GetLastError
CreateMutexA
CloseHandle
Sleep
WriteProcessMemory
GetCommandLineA
GlobalFree
GlobalLock
GlobalAlloc
GetPrivateProfileStringA
GetCurrentThread
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualProtectEx
IsBadReadPtr
CreateThread
user32
ToUnicode
SetWindowsHookExA
CallNextHookEx
GetWindowThreadProcessId
FindWindowA
GetWindowTextA
GetKeyboardState
GetAsyncKeyState
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
msvcrt
malloc
_initterm
free
strchr
_stricmp
_adjust_fdiv
fread
memset
strlen
strstr
strncpy
fclose
fopen
memcpy
strcpy
strrchr
strcmp
strcat
sprintf
??2@YAPAXI@Z
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdt Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ