Static task
static1
Behavioral task
behavioral1
Sample
7dffb4d62fbc51e0908bd909733ec293.dll
Resource
win7-20231129-en
General
-
Target
7dffb4d62fbc51e0908bd909733ec293.exe
-
Size
174KB
-
MD5
7dffb4d62fbc51e0908bd909733ec293
-
SHA1
fecfcac87bb791163ed48f7882263bd8a6654dc8
-
SHA256
36330ee3c38ae53b19a77429e8b13c005735c93b764c0c195ee8fa5da8668017
-
SHA512
bc8d2aa03a4664ed94c704ec61f62c3a1f3cc019dccbd38b51ea101401916b8d45542704bfea49f8fb798b861421a07949c1afe69218508920d6204702128c0c
-
SSDEEP
3072:ZolIRLWS5rOfQ326KRrXV2h2+lMNnTZuFw7Qz+Bf1QmeQmuv5K0N+VbU:+lIRLW1m27rXVs2+SNnTZrUz+B9vpvXN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dffb4d62fbc51e0908bd909733ec293.exe
Files
-
7dffb4d62fbc51e0908bd909733ec293.exe.dll windows:5 windows x86 arch:x86
de31dd75abe38332ca3d0df9db913835
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegOverridePredefKey
oleaut32
VarI2FromCy
msvcrt
memset
user32
TranslateMessage
kernel32
GetModuleFileNameA
OutputDebugStringA
GetModuleHandleW
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ