load
Static task
static1
Behavioral task
behavioral1
Sample
19c224ce36b421fc11a164d41c18936d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19c224ce36b421fc11a164d41c18936d.dll
Resource
win10v2004-20231215-en
General
-
Target
19c224ce36b421fc11a164d41c18936d
-
Size
31KB
-
MD5
19c224ce36b421fc11a164d41c18936d
-
SHA1
1645dfc445b447f6710cb398f591aad12f393cb2
-
SHA256
7f147c9c644eda80a640e708dc8a736b275be97fb56479b56a8bd13a7e336e75
-
SHA512
4b9b8ef3161a4715a19b0ac35ee3268f739b391c66767c6fcfb72f7a53c874db92d4bef50c385478b937e40008f963f8703a58be100663babc71a7ffa4113763
-
SSDEEP
768:zRFprHEkBsDlRYqySdx3I3PGNIPVsa5HRKU/uE1D:zD5laDlSqzx3IPVLKUW8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19c224ce36b421fc11a164d41c18936d
Files
-
19c224ce36b421fc11a164d41c18936d.dll windows:1 windows x86 arch:x86
00c4a4e83f5e094c78cd3de079da36b9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
wsock32
WSAAsyncSelect
ole32
CoTaskMemFree
user32
GetWindowTextA
gdi32
BitBlt
advapi32
LookupAccountNameA
crtdll
_fdopen
Exports
Exports
Sections
pec1 Size: 23KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pec Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE