Static task
static1
Behavioral task
behavioral1
Sample
HttpFile.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
HttpFile.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
dll下载站.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
dll下载站.url
Resource
win10v2004-20231215-en
General
-
Target
51296bf731e35ca38d20549d6352a137
-
Size
19KB
-
MD5
51296bf731e35ca38d20549d6352a137
-
SHA1
c8b03fb2a8eff49546b15e7561b2f9ed088284e5
-
SHA256
44cb9b8572c50c79de2a57a23f61ff3e1a1a6f88a781e57df9968b540fd6c4c2
-
SHA512
6e6b18278d9664181841fd3bc13f868ab7163b7fc8d46109b9165ee6d3a1a6b06526e2887d863f6893ebae175773a89c406ce5601f4ac09577d66d256d7da628
-
SSDEEP
384:K/BqHpX4UUC4R3twdAfEf4v7ghA5JbSDyRDg0Loo5VhIvdGWfNV/JuD:K/gJIUhvwv7VCD0M0L75VhIlGaBsD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HttpFile.dll
Files
-
51296bf731e35ca38d20549d6352a137.rar
-
HttpFile.dll.dll windows:4 windows x86 arch:x86
10fbcdae2d20bb1843e62824388a0e56
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ord419
ord858
ord846
ord843
ord842
ord585
ord186
ord375
ord710
ord719
ord185
ord841
ord160
ord788
ord654
ord747
ord205
ord849
ord565
ord766
ord758
ord560
ord216
ord845
ord844
ord284
ord827
ord415
ord346
ord775
ord736
ord296
ord517
ord515
ord553
ord530
ord536
ord533
ord750
ord793
ord552
ord225
ord522
ord447
ord444
ord822
ord657
ord329
ord864
ord397
ord476
ord513
ord349
ord811
ord770
ord772
ord724
ord774
ord385
ord509
ord248
ord765
ord395
ord512
ord511
ord795
ord722
ord377
ord443
ord441
ord214
ord304
ord318
ord312
ord406
ord594
ord362
ord305
ord364
user32
ord671
wsock32
select
__WSAFDIsSet
ioctlsocket
recv
WSAGetLastError
socket
setsockopt
htons
htonl
connect
closesocket
send
inet_addr
gethostbyname
WSACleanup
WSAStartup
winmm
ord142
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
dll下载站.url.url