Static task
static1
Behavioral task
behavioral1
Sample
08dd59022038adb1ada1b10160de49cc.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08dd59022038adb1ada1b10160de49cc.dll
Resource
win10v2004-20231215-en
General
-
Target
08dd59022038adb1ada1b10160de49cc
-
Size
19KB
-
MD5
08dd59022038adb1ada1b10160de49cc
-
SHA1
13b5af3c9be275d1743b9ca4fe4035daa19ebd8f
-
SHA256
2ca63f0f673e4b058653bc584541f9eed2f80c6f6d27ade226c59417c210d28f
-
SHA512
65c99045d97e2a7dd54aa1f2a3e41c420f86ef9cef36045b659d741f0739c514708d6aed58349a69c35e485c3da0c77b7d23a54a2fbddc8dbe9920bf976e6f56
-
SSDEEP
384:s8FUFBiynfLB7GTFOgoI6BXs8jPY1ZJpJgLa0MpYm:8BiKwTYg4Xs8begLa1+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08dd59022038adb1ada1b10160de49cc
Files
-
08dd59022038adb1ada1b10160de49cc.dll windows:4 windows x86 arch:x86
fcfa2502096423fd052b6943d8266757
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
shell32
ord680
advapi32
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegNotifyChangeKeyValue
user32
UnhookWindowsHookEx
SetWindowsHookExA
SetWindowTextA
GetParent
GetFocus
GetClassNameA
FindWindowA
EnumChildWindows
CharLowerBuffA
CallWindowProcA
CallNextHookEx
wsprintfA
GetWindowTextA
kernel32
FreeLibrary
GetModuleFileNameA
lstrcpynA
lstrlenA
lstrcpyA
lstrcmpA
lstrcatA
VirtualProtect
VirtualFree
VirtualAlloc
Sleep
RtlFillMemory
LoadLibraryA
ExitThread
GetVolumeInformationA
GetTempPathA
GetSystemInfo
GetProcAddress
CloseHandle
CreateThread
GetModuleHandleA
shlwapi
StrToIntA
StrStrA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ