Static task
static1
Behavioral task
behavioral1
Sample
09270f3c662043ea31537036c972d780.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09270f3c662043ea31537036c972d780.dll
Resource
win10v2004-20231215-en
General
-
Target
09270f3c662043ea31537036c972d780
-
Size
120KB
-
MD5
09270f3c662043ea31537036c972d780
-
SHA1
f7835e2fee8cedb7dc703b1dde663dabca4f20cb
-
SHA256
cb20408ebb44640368a6f30a2074db0568c38cf34642df89d76eb9f857d40a50
-
SHA512
4fece142615fc685e2b8bc5fc5016d572cc6b3de20c5166fc28bbde925d1c9c5e1b48db71fb2b33ab700d8d81ec59dabe608757171c69cbd14584f861a41ea1f
-
SSDEEP
3072:iOR+ITs9HqMmnY28TWG0TWhFDeDHghqsyLofwIQgiXK:iOkITEKMmntG06hlQHghYokg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09270f3c662043ea31537036c972d780
Files
-
09270f3c662043ea31537036c972d780.dll windows:4 windows x86 arch:x86
76617e1a081d29216f976c00e1630357
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
MessageBoxA
wsprintfA
CharNextA
LoadStringA
CharPrevA
MessageBoxExA
advapi32
GetSidLengthRequired
FreeSid
GetSecurityDescriptorDacl
RegEnumValueA
SetFileSecurityA
SetSecurityDescriptorDacl
GetSidSubAuthority
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegOpenKeyExA
RegCloseKey
InitializeSid
RegQueryValueExA
AllocateAndInitializeSid
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 526B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ