Static task
static1
Behavioral task
behavioral1
Sample
3650423c8a0a2d59aa47170a84535aad.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3650423c8a0a2d59aa47170a84535aad.dll
Resource
win10v2004-20231215-en
General
-
Target
3650423c8a0a2d59aa47170a84535aad
-
Size
25KB
-
MD5
3650423c8a0a2d59aa47170a84535aad
-
SHA1
08d68c71fd42f764074549fe3e19ca2975c6596b
-
SHA256
86319c20ee6881d822d76beb629964bd49955adb5e86be88d7638c3cf7c57903
-
SHA512
e4edc4ee0ccdf75849e4771289673e8abf05a5670a5df9efc796ad0f4934ab0cdbfec6b461fe6cc4a6e2176d773ed4ba0ed58bfee689e7ce989be93590abf8a8
-
SSDEEP
192:lppCGoswNy4zhasCxxeB0jeyJ2PUEUV+lJdHx62tMgFpGsOGdaDboTCVDU0cimhP:9CGos0ws4oCQPe+/1xTNpGsO940c9P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3650423c8a0a2d59aa47170a84535aad
Files
-
3650423c8a0a2d59aa47170a84535aad.dll windows:4 windows x86 arch:x86
8902fc5e7f3b25ec53c08ce2eb79e936
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
gethostbyname
send
WSAStartup
accept
htons
listen
connect
socket
sendto
bind
recvfrom
closesocket
select
__WSAFDIsSet
recv
wininet
InternetConnectA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetGetConnectedStateEx
FtpPutFileA
urlmon
URLDownloadToFileA
kernel32
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
GlobalFree
lstrcpyA
lstrlenA
lstrcmpA
Sleep
CreateThread
lstrcatA
GetWindowsDirectoryA
WinExec
user32
CharLowerBuffA
gdi32
CreateDCA
GetDeviceCaps
CreateCompatibleDC
DeleteDC
CreateDIBSection
SelectObject
BitBlt
GetDIBColorTable
DeleteObject
advapi32
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ