_f@8
Static task
static1
Behavioral task
behavioral1
Sample
66cc34de95d689e5563372b2b065448e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
66cc34de95d689e5563372b2b065448e.dll
Resource
win10v2004-20231215-en
General
-
Target
66cc34de95d689e5563372b2b065448e
-
Size
9KB
-
MD5
66cc34de95d689e5563372b2b065448e
-
SHA1
ddbb11932594998008a4b98630458ec66b5ee34b
-
SHA256
89ccc677942275e4015dd71300254d728b0faeef66eb3e19deb3eff6544d5135
-
SHA512
d0a72050c3014144be29de26585a0895cd62af3bc0635b654a82274e5fb7a13102aed2be98c6c67b8d51c34498d52c73a9bfb7dd42ac41f33e58a53f374df873
-
SSDEEP
96:QzKFbI+38bY8U2eU7+gd+UfYgrE9B1rnxvhjJC:vlMbdnezspYgrE9Bhnx5jJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66cc34de95d689e5563372b2b065448e
Files
-
66cc34de95d689e5563372b2b065448e.dll windows:4 windows x86 arch:x86
c69cb512102b95d438470faf2187cdd3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTickCount
HeapFree
HeapAlloc
FindClose
FindNextFileA
FindFirstFileA
lstrcatA
GetVersion
lstrlenA
lstrcpyA
GetWindowsDirectoryA
WinExec
WriteFile
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetProcessHeap
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 789B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ