Static task
static1
Behavioral task
behavioral1
Sample
703b852c503f82da1a9dbb9c8d8937c9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
703b852c503f82da1a9dbb9c8d8937c9.dll
Resource
win10v2004-20231215-en
General
-
Target
703b852c503f82da1a9dbb9c8d8937c9
-
Size
24KB
-
MD5
703b852c503f82da1a9dbb9c8d8937c9
-
SHA1
074d287b5cd3a012b6dc66aeb3a81219935f22df
-
SHA256
2eeb512c57905480e638c5b90e1cdb187c1e87364a9e4ab02773dcef26400e29
-
SHA512
df2796f7921b923162ef2d198ed040659b0f3848a03d020e1f1e7c655c8065d6380b9af3726eb73be6caf1c93d539166c19ed5a7dc6cec3abf6972e40053b3c8
-
SSDEEP
384:m3YO8lEW67AC0pCu1g3iSiZvNYdf6EawAkkPl4ViJE8SC:rlEW670bZNYdf6EaZkkPt5t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 703b852c503f82da1a9dbb9c8d8937c9
Files
-
703b852c503f82da1a9dbb9c8d8937c9.dll windows:4 windows x86 arch:x86
9e67624e73684aa338a71020a9c9f15b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
CreateMutexA
Thread32Next
Thread32First
CreateToolhelp32Snapshot
TerminateThread
ResumeThread
ExitProcess
Process32Next
GetFileAttributesW
ReadProcessMemory
VirtualQueryEx
OpenProcess
WideCharToMultiByte
Process32First
GetFileSize
HeapAlloc
GetProcessHeap
GetLastError
OutputDebugStringA
GetModuleHandleA
TerminateProcess
LoadLibraryA
GetSystemDirectoryA
OpenMutexA
GetCurrentProcessId
GetProcAddress
FreeLibrary
VirtualProtect
GetPrivateProfileStringA
GetFileAttributesA
CreateFileA
GetTickCount
CloseHandle
ReadFile
SetFilePointer
DeleteFileA
GetModuleFileNameA
CreateThread
user32
UnhookWindowsHookEx
CallNextHookEx
wsprintfA
GetForegroundWindow
SetWindowsHookExA
wvsprintfA
GetWindowTextW
GetWindow
GetClassNameA
advapi32
RegOpenKeyA
RegCloseKey
wininet
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetOpenUrlA
FtpPutFileA
msvcrt
wcslen
_strcmpi
_stricmp
_adjust_fdiv
_initterm
_except_handler3
malloc
strncpy
free
wcsstr
wcscpy
wcsncat
strrchr
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ