Scan
Static task
static1
Behavioral task
behavioral1
Sample
3cc3887da598cca940e509d0e4d43af6.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3cc3887da598cca940e509d0e4d43af6.dll
Resource
win10v2004-20231222-en
General
-
Target
3cc3887da598cca940e509d0e4d43af6
-
Size
62KB
-
MD5
3cc3887da598cca940e509d0e4d43af6
-
SHA1
d8754734c434b24746d4efa44d4aca0ec64f1a8a
-
SHA256
4ade815d3810d46dc035e37bde72926e4292a7abe280932ee81941cd18a5722d
-
SHA512
17a72fe45a23f85fcac9c304517b4f7d1a4e3d87bf4e7b62f9ec3e684e7f12a31183230872c040c44ca3fb845b829fb6fce4b3267e5fcce49a4ec8e067b6658f
-
SSDEEP
768:xpDeru6sSoCVWdR+M8XTPrZ0X1wfqB8rG94nyJETl9EPgxabst2Xo5iD4lgigjgf:xasSoe+eH6yD2pMwu8AClf34UJS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cc3887da598cca940e509d0e4d43af6
Files
-
3cc3887da598cca940e509d0e4d43af6.dll windows:4 windows x86 arch:x86
3734808e34c710b3c6f93b4d78624a88
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemDirectoryA
GetFileAttributesA
OutputDebugStringA
GetTempPathA
DeleteFileA
lstrcatA
WinExec
GetLastError
FreeResource
WriteFile
SizeofResource
LockResource
LoadResource
FindResourceA
CreateFileA
ExpandEnvironmentStringsA
DeviceIoControl
UnmapViewOfFile
TerminateProcess
MapViewOfFile
CreateFileMappingA
GetFileSize
ReadFile
WaitForSingleObject
CreateProcessA
GetStartupInfoA
CreatePipe
SetFileAttributesA
CopyFileA
GetDriveTypeA
GetLogicalDriveStringsA
GetWindowsDirectoryA
GetSystemTime
TerminateThread
FindClose
FindNextFileA
FindFirstFileA
LoadLibraryA
GetProcAddress
OpenProcess
CloseHandle
Sleep
ExitProcess
GetTickCount
CreateThread
user32
FindWindowA
GetWindowLongA
ShowWindow
advapi32
CreateServiceA
ControlService
CloseServiceHandle
DeleteService
OpenSCManagerA
StartServiceA
OpenServiceA
shell32
ShellExecuteA
ws2_32
inet_addr
inet_ntoa
gethostbyname
htons
connect
send
closesocket
gethostname
WSAStartup
socket
mpr
WNetAddConnection2A
rpcrt4
NdrPointerUnmarshall
NdrConformantStringUnmarshall
NdrAllocate
NdrConformantArrayBufferSize
I_RpcGetBuffer
NdrConformantArrayMarshall
NdrServerInitializeNew
RpcRaiseException
NdrPointerBufferSize
NdrConformantStringBufferSize
NdrPointerMarshall
NdrConformantStringMarshall
NdrConvert
NdrConformantArrayUnmarshall
NdrClientInitializeNew
NdrNsGetBuffer
NdrNsSendReceive
NdrFreeBuffer
RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcStringFreeA
RpcBindingFree
msvcrt
_adjust_fdiv
_initterm
_onexit
__dllonexit
??2@YAPAXI@Z
??3@YAXPAX@Z
strncpy
fputc
_stricmp
atoi
fwrite
fread
fseek
sprintf
_except_handler3
printf
malloc
free
fclose
fopen
strchr
ftell
msvcp60
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Exports
Exports
Sections
.data Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ