Start
Static task
static1
Behavioral task
behavioral1
Sample
3bb348d0127d5d8c4a3dacb91cc73259.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3bb348d0127d5d8c4a3dacb91cc73259.dll
Resource
win10v2004-20231215-en
General
-
Target
3bb348d0127d5d8c4a3dacb91cc73259
-
Size
11KB
-
MD5
3bb348d0127d5d8c4a3dacb91cc73259
-
SHA1
6e9047073d5afe1ccc1cd03f7f95e45b50e09375
-
SHA256
f024a0118a4207c894718b8660e6939aa6c56da5385e51a5a521c8b5214df9a4
-
SHA512
3d04b76b1e222d427578fc764e965c1c43803158edaabc34dbd2924a30997727407250e1646c968489a7abd9f4a1247135a49243c092bae23257de9048a38751
-
SSDEEP
192:hIdrwL9k5Yig6eha+ikhxVmtA62IR4aQiEyUf6pYMOXS:hIpR5Yig6ehawxVmtr2Q4aQiEPChOXS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bb348d0127d5d8c4a3dacb91cc73259
Files
-
3bb348d0127d5d8c4a3dacb91cc73259.dll windows:4 windows x86 arch:x86
b7ad56c4e76635fa7c859ff9218a461a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeLibrary
GetProcAddress
Sleep
GetCommandLineA
CreateProcessA
DeleteFileA
GetWindowsDirectoryA
LoadLibraryA
user32
DefWindowProcA
GetWindowLongA
SetTimer
DestroyWindow
UpdateWindow
ShowWindow
GetWindowTextA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
KillTimer
PostQuitMessage
EnumWindows
advapi32
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
winmm
timeGetTime
wininet
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetGetConnectedState
FtpGetFileA
mfc42
ord860
ord540
ord941
ord2915
ord5186
ord800
ord354
ord1979
ord665
msvcrt
strcat
memset
__CxxFrameHandler
rand
srand
strcpy
time
strcmp
sprintf
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
strlen
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ