_StartRun@16
Static task
static1
Behavioral task
behavioral1
Sample
657f8ea770b653de78ab0879f9f6ef1f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
657f8ea770b653de78ab0879f9f6ef1f.dll
Resource
win10v2004-20231215-en
General
-
Target
657f8ea770b653de78ab0879f9f6ef1f
-
Size
72KB
-
MD5
657f8ea770b653de78ab0879f9f6ef1f
-
SHA1
b7fbeb724d7b4717777357e54957c2ead97ac48c
-
SHA256
8c1baa2e2e98344580df9c9e45444ade327c412ecf8f0f83efffad7bfda75a30
-
SHA512
23a4796fc1cb62b6c608291e48d0ec5615bafb8c56f279fa2cc20a9455e396888a4d40d854014278a9ee5a1e67c3a54270550a0591216d28c134d2c475f101fc
-
SSDEEP
1536:D14+CvkTMQ9y6WVpPOoEdwsW14+CvkTMQ9y6WVpPOoEdws:9CvJ6YdOoEOvCvJ6YdOoEO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 657f8ea770b653de78ab0879f9f6ef1f
Files
-
657f8ea770b653de78ab0879f9f6ef1f.dll windows:4 windows x86 arch:x86
f906ae9a38ddb998c3013e0d4311a165
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetPrivateProfileIntA
WritePrivateProfileStringA
DeleteFileA
GetPrivateProfileStringA
CloseHandle
RtlUnwind
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
HeapAlloc
GetCPInfo
GetACP
user32
KillTimer
SendMessageA
DefWindowProcA
PostQuitMessage
TranslateMessage
DispatchMessageA
PeekMessageA
GetMessageA
WaitMessage
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
GetWindowLongA
SetWindowLongA
SetWindowPos
SetTimer
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
wininet
InternetCheckConnectionA
InternetQueryOptionA
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ