Static task
static1
Behavioral task
behavioral1
Sample
37c45f7c21a5360c1af13ffff42d0b4f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
37c45f7c21a5360c1af13ffff42d0b4f.dll
Resource
win10v2004-20231222-en
General
-
Target
37c45f7c21a5360c1af13ffff42d0b4f
-
Size
18KB
-
MD5
37c45f7c21a5360c1af13ffff42d0b4f
-
SHA1
25c61d004101ee25fbb44760d6c9cbe7284c6d85
-
SHA256
e11527eb620e0aa0f36b287b3689fc7a599465421018f3666e5188e71f121aee
-
SHA512
c84e8e9eb9d1421c2e49ac401e0c1ead067d3e90d67fa54c3d7e94b5bf8b0d13533e45cc8119f42ad88e4f46e455dddb756e3a5899de3f7e4de8874248801991
-
SSDEEP
384:JXGrlDUFeCGvwjUBFEaJsO5t+q2MSQc4xPavl50ivMO:JAEFFAp/5uIxCvl50iv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37c45f7c21a5360c1af13ffff42d0b4f
Files
-
37c45f7c21a5360c1af13ffff42d0b4f.dll windows:4 windows x86 arch:x86
d08fa5172cc0fbad9b15647a2f0f89a1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetProcAddress
GetModuleHandleA
GetCurrentThread
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
RaiseException
GetPrivateProfileStringA
WriteProcessMemory
TerminateThread
IsBadReadPtr
WideCharToMultiByte
GetCurrentProcessId
GetLocalTime
SetLocalTime
Sleep
GetCurrentProcess
VirtualProtectEx
GetModuleFileNameA
CreateThread
OpenMutexA
CreateMutexA
ReadProcessMemory
user32
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
GetWindowThreadProcessId
FindWindowA
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
msvcrt
fopen
_stricmp
_adjust_fdiv
malloc
_initterm
free
strstr
strncpy
strcat
sscanf
strrchr
memcpy
strcpy
sprintf
??2@YAPAXI@Z
strlen
fclose
fread
_strlwr
memset
??3@YAXPAX@Z
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdt Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ