service
Static task
static1
Behavioral task
behavioral1
Sample
42e59a7ef1b27e6723f2158696cb8003.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42e59a7ef1b27e6723f2158696cb8003.dll
Resource
win10v2004-20231215-en
General
-
Target
42e59a7ef1b27e6723f2158696cb8003
-
Size
12KB
-
MD5
42e59a7ef1b27e6723f2158696cb8003
-
SHA1
f16709c12cf930df2e05366a2c5a1397920e60d6
-
SHA256
3a22409e121e7095d1db194bb5ad4ac7946649b5b09f1f954624984a265bcdb6
-
SHA512
17087a7c106a24557cb5832125237f1264a3fa22d1139cd47facf2b30549a756b90ae6af6e864cd281cb9c5b5b000e065b4a44438aa4227b07d7751bcd76a5ba
-
SSDEEP
192:9y0YxHs8pf1iox2CR7+PlzSX3jmg2Zl4tjtbJLQ0C+2ulzAbVRYojz:U0YxMpQL+lzGjmgkYbJUh+2ulzAboQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42e59a7ef1b27e6723f2158696cb8003
Files
-
42e59a7ef1b27e6723f2158696cb8003.dll windows:4 windows x86 arch:x86
97c4742be457bed6e965f08425d36358
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
??1type_info@@UAE@XZ
urlmon
URLDownloadToFileA
shlwapi
PathFileExistsA
wininet
InternetCrackUrlA
user32
TranslateMessage
ole32
CoCreateInstance
oleaut32
SysAllocString
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE