fa
Static task
static1
Behavioral task
behavioral1
Sample
055b4d7ccdc371039c9d2b1100e3d25e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
055b4d7ccdc371039c9d2b1100e3d25e.dll
Resource
win10v2004-20231215-en
General
-
Target
055b4d7ccdc371039c9d2b1100e3d25e
-
Size
16KB
-
MD5
055b4d7ccdc371039c9d2b1100e3d25e
-
SHA1
f816bfb6382dedea38a22c3b01e06fecca37a01b
-
SHA256
4045765a93078381fbc69170aed939d01d805456e7ea1a401652201a8215c91b
-
SHA512
d895550f367ff9d7e154352d780ee4eae75803186afddabb953a3dc3b2ca73c5f54e5f33583e8fcad90227ad914eb690cd44ca934c5c4828f5cfcf523746b29f
-
SSDEEP
384:RlmGpR3uV+j/HFSiywShdY1g2VcUBtN4Szo6/:HmGew0LzhCVRRNzoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 055b4d7ccdc371039c9d2b1100e3d25e
Files
-
055b4d7ccdc371039c9d2b1100e3d25e.dll windows:4 windows x86 arch:x86
df9c9db3be60a4de048d515ebf594911
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WriteProcessMemory
GetProcAddress
GetModuleHandleA
OpenProcess
Sleep
ReadProcessMemory
IsBadReadPtr
GlobalFree
GlobalLock
GlobalAlloc
GetCurrentProcessId
GetPrivateProfileStringA
CreateThread
GetModuleFileNameA
GetCurrentProcess
user32
IsWindowVisible
CallNextHookEx
SendMessageA
EnumChildWindows
FindWindowExA
SetWindowsHookExA
GetWindowThreadProcessId
GetClassNameA
FindWindowA
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
msvcrt
malloc
_initterm
free
fopen
fread
_stricmp
_adjust_fdiv
fclose
memset
strcmp
??2@YAPAXI@Z
sprintf
??3@YAXPAX@Z
strrchr
memcpy
strlen
strcpy
strcat
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdt Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 874B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ