Static task
static1
Behavioral task
behavioral1
Sample
0b33fdb55f37b0d08958d32e94c2f343.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b33fdb55f37b0d08958d32e94c2f343.dll
Resource
win10v2004-20231222-en
General
-
Target
0b33fdb55f37b0d08958d32e94c2f343
-
Size
19KB
-
MD5
0b33fdb55f37b0d08958d32e94c2f343
-
SHA1
6b8ed70c86b3c887f59614a031e7c5a7bd4d096f
-
SHA256
d9257f959bfe1b6667b5d63752447d2437e297706a64bacfb3bd82ba42221101
-
SHA512
1c571f194013dec226eb9ed09cbb2634fd3f1ca04d7206b8c8d32f53e3d1d942e692c832a4dd907f62048ccd3f31938fd5588355a5201b8e9e6dfa55035ed39e
-
SSDEEP
384:+zrWyUB3l3gOmFinfYPRrIH5XpNfbIVMlHOsjwaxIftqY2eVHtQFmYdic2TQ++OS:+8hgOmyMKXpNlNjtGqetQmQ++OBNa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b33fdb55f37b0d08958d32e94c2f343
Files
-
0b33fdb55f37b0d08958d32e94c2f343.dll windows:4 windows x86 arch:x86
e17d30e4224e5ab3a1bf2b096da963ba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
TerminateThread
IsBadReadPtr
GetPrivateProfileStringA
RaiseException
WideCharToMultiByte
CreateMutexA
OpenMutexA
ReadProcessMemory
SetThreadContext
GetCurrentThread
SetUnhandledExceptionFilter
GetModuleFileNameA
GetCurrentProcess
GetCurrentProcessId
WriteProcessMemory
TerminateProcess
VirtualProtectEx
InitializeCriticalSection
Sleep
CreateThread
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetProcAddress
user32
FindWindowA
GetWindowThreadProcessId
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
ws2_32
WSASetLastError
wininet
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
msvcrt
strncpy
_stricmp
_strupr
_adjust_fdiv
malloc
_initterm
free
strrchr
strstr
memcpy
strcpy
atoi
strchr
memset
strcat
sprintf
??2@YAPAXI@Z
_strlwr
wcslen
strlen
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdata Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ