Static task
static1
Behavioral task
behavioral1
Sample
39ad1e0410da575256b154cdfd21a494.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
39ad1e0410da575256b154cdfd21a494.dll
Resource
win10v2004-20231222-en
General
-
Target
39ad1e0410da575256b154cdfd21a494
-
Size
21KB
-
MD5
39ad1e0410da575256b154cdfd21a494
-
SHA1
48d4ac74720416acad7dcf4aadd1c089651fa480
-
SHA256
16e206affe2530ff78a724254e37817cdc87aed98a2d3daeefb1a3ea6b15a382
-
SHA512
33c9f4d439bbb1f5939828bb794aba78f49d35d16aa5cc44fc94eee096f6121759b2d24083150782ee83e126d1a841005049764bcf4dc83b64b15085d911f738
-
SSDEEP
384:KuivfxvYyvpKcNa9XFZcDn4iKHBqvcgV5ypVTCxKTf4LCj9:zwNxvocYFmcPHUrypVTlTfeCj9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39ad1e0410da575256b154cdfd21a494
Files
-
39ad1e0410da575256b154cdfd21a494.dll windows:4 windows x86 arch:x86
b63c0ae4c7c1a2b32bf22da216b56c93
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitThread
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateThread
WaitForMultipleObjects
lstrcatA
CreateMailslotA
GetModuleFileNameA
GetLastError
DisableThreadLibraryCalls
WaitForSingleObject
GetVersionExA
lstrcpyA
ReadFile
GetSystemDirectoryA
CreateDirectoryA
GetTickCount
GetTempFileNameA
GetFileAttributesA
DeleteFileA
lstrlenA
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
SetFilePointer
ReleaseMutex
SetEndOfFile
CreateEventA
CreateMutexA
CreateThread
lstrcmpA
ResetEvent
CompareStringA
Sleep
OpenProcess
CreateFileA
WriteFile
CloseHandle
SetEvent
user32
wsprintfA
advapi32
CryptDecrypt
RegQueryValueExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegNotifyChangeKeyValue
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptEncrypt
CryptDeriveKey
CryptHashData
OpenProcessToken
CreateProcessAsUserA
CryptCreateHash
CryptAcquireContextA
RegCreateKeyExA
wininet
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
InternetConnectA
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ