Static task
static1
Behavioral task
behavioral1
Sample
5666218769f60679bd21c5f4f5433cfa.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5666218769f60679bd21c5f4f5433cfa.dll
Resource
win10v2004-20231215-en
General
-
Target
5666218769f60679bd21c5f4f5433cfa
-
Size
22KB
-
MD5
5666218769f60679bd21c5f4f5433cfa
-
SHA1
1850bffc480ad983abb274813fb29f9da6d7188f
-
SHA256
101337b92eaaa28b104c83c995411f00898dfadc9ee6730c8ded479e32933fa2
-
SHA512
0353fd009985761a4b78c208a273d88242649afc7bae6377767eeb6ca8a892cd420c9269eeba43d6677555536a8151f3c0f883dd96dff9a54b6052f28db055fe
-
SSDEEP
384:0gsoUNRrgftLlWwC2QD8Qmd1SDoXSWo142i04gHfYG1iB2nJje0YLchXFLScQg0:NtUNyftcwC2mzmPzSr15t4B2nhe0YgHY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5666218769f60679bd21c5f4f5433cfa
Files
-
5666218769f60679bd21c5f4f5433cfa.dll windows:4 windows x86 arch:x86
9f76c9faf41fb9794b73a08d5a39fc39
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileA
ExitProcess
user32
GetDC
BeginPaint
TranslateMessage
GetDesktopWindow
gdi32
Arc
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE