Static task
static1
Behavioral task
behavioral1
Sample
333abe2fb0668849ea9bcb50d5500fc8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
333abe2fb0668849ea9bcb50d5500fc8.dll
Resource
win10v2004-20231222-en
General
-
Target
333abe2fb0668849ea9bcb50d5500fc8
-
Size
268KB
-
MD5
333abe2fb0668849ea9bcb50d5500fc8
-
SHA1
453561fc9a8f27b71d3835898905106c7b117a4b
-
SHA256
cab0e91cc00724759bb5549ea39bef0a14132dad92a93b1e033b5fc015aebedb
-
SHA512
67f94419a3e7c135e002f4df7e78eb679de177835e196acf7df1aabdf61f0f84ad44aeede8661d37404a56953cf39f685e735f0640916b9719535aa100b85177
-
SSDEEP
6144:JAvSWNb3JC788rvXWeiT0nxyparsbtP/C:JAv30ATT0xy1btP/C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 333abe2fb0668849ea9bcb50d5500fc8
Files
-
333abe2fb0668849ea9bcb50d5500fc8.dll windows:4 windows x86 arch:x86
3627139ec6bbe1a334d2beac8c93f2ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
user32
FillRect
EqualRect
FindWindowA
EnumWindows
FrameRect
kernel32
LoadLibraryExA
GetCommandLineW
ExitProcess
VirtualAllocEx
GetProcAddress
GetModuleHandleW
ExitThread
lstrlenA
GetLastError
GetVersionExA
GetOEMCP
GetModuleHandleA
GetACP
lstrlenW
IsBadHugeReadPtr
Sections
CODE Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ