rand
Static task
static1
Behavioral task
behavioral1
Sample
3b7dfef8805bcb6708535424842df833.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b7dfef8805bcb6708535424842df833.dll
Resource
win10v2004-20231222-en
General
-
Target
3b7dfef8805bcb6708535424842df833
-
Size
10KB
-
MD5
3b7dfef8805bcb6708535424842df833
-
SHA1
616139bbee205455b1a750fcdfac4c77e1370e07
-
SHA256
7bd4cb56f02eb0541c74c39597c142c1e0d46418a63c8d7dee75137f7cd0053d
-
SHA512
9410c4e2292e8f619e3a320f34a272a4e8e9ffa59d15842209ca3ef7d15777312bb6380b74e8618d07450d6248ae7cf31a6b41e4cb04931ab71d748445e481ef
-
SSDEEP
96:Z1aEQWowURjmxdyRgPLJgT3vCSfaMpBMcndP3cBd4xdaEC3EPW9NkSl:+EQRwURjKyOPeT36SHpBMcn93c4dWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b7dfef8805bcb6708535424842df833
Files
-
3b7dfef8805bcb6708535424842df833.dll windows:1 windows x86 arch:x86
96fa89c2bd4a17435db0c16b55c67ed2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
DeleteFileA
ExitThread
ExpandEnvironmentStringsA
GetFileTime
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
GlobalFree
ReadFile
SetFileTime
Sleep
WinExec
user32
MessageBoxA
wsprintfA
Exports
Exports
Sections
.Proxy Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE