ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
4827348e7fd69396ec9708d1f93928bc.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4827348e7fd69396ec9708d1f93928bc.dll
Resource
win10v2004-20231215-en
General
-
Target
4827348e7fd69396ec9708d1f93928bc
-
Size
143KB
-
MD5
4827348e7fd69396ec9708d1f93928bc
-
SHA1
5092dc74d5dacce4bd45b858d147d3c1043cbc81
-
SHA256
c26b405f967bb75d0ade766ff92ea41637f8fb9424d3f5dbba7e6ce6bc2ecc02
-
SHA512
7bd00b67dc1a3aa4acb5637ad8b5938848f07924516a3b88424acd3de24b68c2d8a9968e9db38be512c95cbe09a91e91820385ac32748607379b9170304f6ed8
-
SSDEEP
3072:9xvID0m91vIrJOFoD7pUSCCkgaFRtvUBn+0Ka0IOip2RFqco4T6LsK:9lFmLvIhnjerUBVKa0IORI4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4827348e7fd69396ec9708d1f93928bc
Files
-
4827348e7fd69396ec9708d1f93928bc.dll windows:4 windows x86 arch:x86
b7853ed6807962ab4fb752611bb7c73f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
user32
MessageBoxA
advapi32
RegisterServiceCtrlHandlerA
ole32
CoInitializeEx
oleaut32
VariantClear
ws2_32
closesocket
psapi
GetModuleFileNameExA
wininet
HttpSendRequestA
Exports
Exports
Sections
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE