Check
Static task
static1
Behavioral task
behavioral1
Sample
6ad656fbb41cd29d0e4029bf22ef74c1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6ad656fbb41cd29d0e4029bf22ef74c1.dll
Resource
win10v2004-20231215-en
General
-
Target
6ad656fbb41cd29d0e4029bf22ef74c1
-
Size
28KB
-
MD5
6ad656fbb41cd29d0e4029bf22ef74c1
-
SHA1
fa6d867d7af418297a98435c7c1bd9d69a8d9b2d
-
SHA256
45d3914e79f464437c7052e0a23c09cca8a5acd40a519035eb25372034ab29c3
-
SHA512
3c0fa58830a9f798fefd4003da06cd73ad1f6f952dcc23baa1c243d859f30c86545e9c00e1790a1de562611d00222ffb5258fc7c1ed6ce3dc94d0594b01f4f94
-
SSDEEP
192:rnjm2Zf7o3ipwnS7tmPOZm7I3yowCpZHi5T1GZUiG:rCsk30RtaimUVwCpZH/uiG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ad656fbb41cd29d0e4029bf22ef74c1
Files
-
6ad656fbb41cd29d0e4029bf22ef74c1.dll windows:4 windows x86 arch:x86
5a32c409257b0b1fcdb800fd0810f673
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
FindWindowA
SetTimer
KillTimer
SetWindowsHookExA
CallNextHookEx
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
msvcrt
malloc
_adjust_fdiv
_initterm
free
strncpy
wcscpy
wcslen
strstr
strrchr
sprintf
_stricmp
_strlwr
_strnicmp
kernel32
GetVersionExA
DeleteFileW
GetTempFileNameA
GetTempPathA
SetEvent
VirtualAlloc
SetFilePointer
IsBadReadPtr
MoveFileA
CopyFileA
FreeLibrary
MultiByteToWideChar
VirtualFree
WinExec
WriteFile
VirtualProtect
WriteProcessMemory
CreateFileA
GetFileSize
ReadFile
CloseHandle
OpenEventA
DeleteFileA
Sleep
CreateEventA
LoadLibraryA
ResetEvent
WaitForSingleObject
GetModuleFileNameA
CreateThread
GetLastError
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
GetSystemDirectoryA
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HOOKDAT Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 622B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ