Static task
static1
Behavioral task
behavioral1
Sample
2a1aa25da073bf6b995ed54d61649a17.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a1aa25da073bf6b995ed54d61649a17.dll
Resource
win10v2004-20231215-en
General
-
Target
2a1aa25da073bf6b995ed54d61649a17
-
Size
21KB
-
MD5
2a1aa25da073bf6b995ed54d61649a17
-
SHA1
7cbc93274f090d2f296e512783a86efc1a6f5dfa
-
SHA256
0bc7d13a144d879d8b5ee5f2e11095e3b86db07ce17df813783ee29f4c3a0b26
-
SHA512
9f563a7b94ed230aa70c027ca6026040b3bf39d442aaeb9d7ea5b928dea8f819e5cfb2f162e9868930b8488d8074e43a84f1ec0393ed9f87239a27f94cad7a07
-
SSDEEP
384:SyzIVkFb+lZ6rbVIhyMvE48uKLDWrbNWp4:SyzIV+bEZ61Ih5vv8uKLA44
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a1aa25da073bf6b995ed54d61649a17
Files
-
2a1aa25da073bf6b995ed54d61649a17.dll windows:4 windows x86 arch:x86
c05e961e49ef2ad5e03a43d1351fd8d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetFilePointer
CreateFileA
HeapAlloc
GetProcessHeap
VirtualProtect
ReadFile
GetModuleHandleA
LoadLibraryA
IsBadReadPtr
GetCommandLineA
GetFileSize
GetModuleFileNameA
SetEvent
CloseHandle
Sleep
GetCurrentProcess
TerminateProcess
OpenEventA
CreateEventA
CreateThread
user32
wsprintfA
wvsprintfA
MapVirtualKeyA
ToAscii
CallNextHookEx
SetWindowsHookExA
BroadcastSystemMessageA
GetKeyboardState
advapi32
RegCloseKey
RegSetValueExA
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
msvcrt
strrchr
_except_handler3
memcpy
realloc
strstr
_strlwr
_initterm
_adjust_fdiv
_strcmpi
strcat
strcpy
strlen
strncpy
memset
free
malloc
wininet
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ