f
Static task
static1
Behavioral task
behavioral1
Sample
704e8d21b5fe2b4968f8dcf7c92b4c98.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
704e8d21b5fe2b4968f8dcf7c92b4c98.dll
Resource
win10v2004-20231215-en
General
-
Target
704e8d21b5fe2b4968f8dcf7c92b4c98
-
Size
9KB
-
MD5
704e8d21b5fe2b4968f8dcf7c92b4c98
-
SHA1
eef6d86a3b6ebbb5c73f0e3294d5e8a38b149508
-
SHA256
d00fcc734bcf3cfd6361e615250eaba7d47d30279b808cb4938770ac815fdc34
-
SHA512
dd0bf2508b36297c9a1538c1d388bdf4075a2e248372b97b7c167fba2e4a4d390736d4de28439021602ecd53ffd9909b7bcfa8fddd43528911802037dcdede23
-
SSDEEP
192:9hX2IhNvvikk0khZAqTjSszacva8px00t0kblaODEAT:9FBvvikkth9Tjbacva8px02RaOT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 704e8d21b5fe2b4968f8dcf7c92b4c98
Files
-
704e8d21b5fe2b4968f8dcf7c92b4c98.dll windows:4 windows x86 arch:x86
3db9907ad69d31cc8038e9b6d55a1472
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
CreateThread
GetDateFormatA
GetTimeFormatA
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
GetLastError
CreateMutexA
Sleep
GetEnvironmentVariableA
lstrcat
lstrcpy
lstrlen
CreateDirectoryA
CreateFileA
WriteFile
ReadFile
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameA
SetFilePointer
DeleteFileA
CloseHandle
wininet
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegDeleteValueA
RegEnumValueA
user32
wsprintfA
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 548B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ