Static task
static1
Behavioral task
behavioral1
Sample
672d343927c0f4e38e4d1a486844019a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
672d343927c0f4e38e4d1a486844019a.dll
Resource
win10v2004-20231215-en
General
-
Target
672d343927c0f4e38e4d1a486844019a
-
Size
9KB
-
MD5
672d343927c0f4e38e4d1a486844019a
-
SHA1
2f7e1398c537a137c92f545c520ad4b9a0d80209
-
SHA256
e79d6f211788e1f65da74d23212d208f87be0b3aa065c9de0577afa6fd73a6df
-
SHA512
e26f499967d82404f709e105d5878fea5ebd235936b61af50f13e5fdfa37b7b3b32b4b04aa4c6358b4519566dd32c3e832a6d8dce08ca9019322f49e02406690
-
SSDEEP
192:5rWMzj4isO6zIt5bOfNgfKsjAjPBJ19rC1PezJaQX:sj/zIGfN3sj4Mga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 672d343927c0f4e38e4d1a486844019a
Files
-
672d343927c0f4e38e4d1a486844019a.dll windows:1 windows x86 arch:x86
ea83dd1f84dbf8f3fc8c6340e7962783
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
AddAccessAllowedAce
CreatePrivateObjectSecurity
wsock32
recv
send
user32
CreateWindowExA
CreateWindowStationA
SetUserObjectSecurity
kernel32
CreateThread
Sleep
Sections
.code Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 414B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 826B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE