Static task
static1
Behavioral task
behavioral1
Sample
3.dll
Resource
win7-20231215-en
General
-
Target
3.dll
-
Size
78KB
-
MD5
9d9fcc8c0a25dd52c5d7073921635772
-
SHA1
73e1d4d47f6628536de810272720f2fae26b376f
-
SHA256
c9896901455604f92926a62725bab773186e77ff81425c00f88b85bb6e0c8ec5
-
SHA512
46ef9492f83ff6fda61584e872a60cbe397f84cb1d1d22b5bc07731855369f3de35e37affdfec702bc6285df1d689542ed426103da3e463db0de42c38d9f3acf
-
SSDEEP
1536:lhEBzq5nVKZEx8RN0mr5fnUxmk4Jlcki+5dzLoA0o:lhEmVWEx8Y6uxpki+5dwA0o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3.dll
Files
-
3.dll.dll windows:5 windows x86 arch:x86
8bb35b9dc147e7350bc2c4902d7eb80c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateDirectoryA
ExpandEnvironmentStringsA
GetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetModuleFileNameW
GetModuleHandleW
Process32Next
Process32First
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
CreateThread
GetFullPathNameW
GetCommandLineW
GetFileAttributesW
LocalFree
CreateFileW
LocalAlloc
WriteFile
OutputDebugStringA
SetLastError
CreateFileA
IsBadReadPtr
VirtualAlloc
VirtualFree
FreeLibrary
GetNativeSystemInfo
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeW
GetFileSize
GetProcessHeap
HeapAlloc
ReadFile
CloseHandle
HeapFree
VirtualProtect
Sleep
GetStringTypeA
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetLastError
HeapReAlloc
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapSize
ExitProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
user32
GetWindowThreadProcessId
PostMessageA
EnumWindows
shell32
CommandLineToArgvW
ole32
CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoUninitialize
oleaut32
VariantInit
SysFreeString
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
crypt32
CryptStringToBinaryA
urlmon
URLDownloadToFileA
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ