snaifls
Static task
static1
Behavioral task
behavioral1
Sample
6662635d839456d696c200e098750d56.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6662635d839456d696c200e098750d56.dll
Resource
win10v2004-20231222-en
General
-
Target
6662635d839456d696c200e098750d56
-
Size
17KB
-
MD5
6662635d839456d696c200e098750d56
-
SHA1
58578f8718b37a8c4456ba7507356274bf616df9
-
SHA256
c8b0767235683075284bcc0cc6663dba20deab7f066125cc82b7b180aafe125e
-
SHA512
912d37320adb90836ab84ab4867d2fdf087f26f6a2857c9606476b9aec15cb84639bfbd09ccf8657022a5ad2d50e2843c5757bd653f4f73d9b89710864123fb5
-
SSDEEP
384:pmKMTHzNWVe+3cXn0D014ZKyMbyme/rRJCUFYkq:pleWVe+5AyZObyHY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6662635d839456d696c200e098750d56
Files
-
6662635d839456d696c200e098750d56.dll windows:4 windows x86 arch:x86
3de87bb031ad7dc26a01cfef04817f0e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
SendMessageW
CreateWindowExW
UpdateWindow
UnregisterHotKey
TranslateMessage
ShowWindow
SetWindowTextA
ReleaseDC
RegisterHotKey
RegisterClassExA
RegisterClassA
MessageBoxA
BeginPaint
LoadIconA
LoadCursorA
GetSystemMetrics
GetSysColorBrush
GetMessageA
GetDC
EndPaint
EnableWindow
DispatchMessageA
DefWindowProcA
CloseDesktop
ChangeMenuA
kernel32
GetModuleHandleW
lstrcpyA
lstrcatA
WriteFile
Sleep
SetFileApisToANSI
LocalFree
LocalAlloc
HeapAlloc
GetModuleHandleA
GetLocalTime
GetCommandLineA
ExitThread
ExitProcess
DeviceIoControl
DeleteFileA
CreateFileA
CloseHandle
Beep
AddConsoleAliasA
gdi32
GetDIBits
PlayEnhMetaFile
GetClipBox
StretchBlt
CreateCompatibleDC
DeleteObject
DeleteDC
CreateDIBSection
SelectObject
ws2_32
WSASocketA
socket
setsockopt
recv
gethostbyname
ntdll
NtSetEvent
NtQuerySemaphore
NtPrivilegeCheck
NtCreatePort
RtlGetProcessHeaps
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ