Static task
static1
Behavioral task
behavioral1
Sample
41e568677a337183837361f8dfda14c1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41e568677a337183837361f8dfda14c1.dll
Resource
win10v2004-20231222-en
General
-
Target
41e568677a337183837361f8dfda14c1
-
Size
44KB
-
MD5
41e568677a337183837361f8dfda14c1
-
SHA1
0d33ed78a7f8dc217b4ab73cbd2c746234e2da4c
-
SHA256
dd3d7c964aef92129635979944977f3d885f52bc3e7a08b66ff8ee47e98ab4e3
-
SHA512
ded48ed0ced48269a087547aded06d979573097377169e92891ab1b66376c3ef23edd5ac1a1514f25afbee34c05bb2e02b6ecc9ffe906426b6e2b85751ca13b3
-
SSDEEP
768:VwvFNNTAL8/tJnYPka20+8YqkJuN4/o4fd:VwvTNTAUXYPk307mFo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41e568677a337183837361f8dfda14c1
Files
-
41e568677a337183837361f8dfda14c1.dll windows:4 windows x86 arch:x86
42f89051e417fab8b283c91c45be35b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WaitForSingleObject
SetEvent
Sleep
ResetEvent
CreateEventA
InterlockedIncrement
InterlockedDecrement
GetLastError
CreateThread
TlsSetValue
TlsGetValue
ExitThread
CloseHandle
GetCurrentThreadId
GetCommandLineA
GetVersion
HeapFree
TlsAlloc
TlsFree
SetLastError
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
LCMapStringA
LCMapStringW
user32
wsprintfA
netapi32
Netbios
wininet
InternetCheckConnectionA
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ