service
Static task
static1
Behavioral task
behavioral1
Sample
7dd24912e2c056b838b44a480aa41f13.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7dd24912e2c056b838b44a480aa41f13.dll
Resource
win10v2004-20231215-en
General
-
Target
7dd24912e2c056b838b44a480aa41f13
-
Size
21KB
-
MD5
7dd24912e2c056b838b44a480aa41f13
-
SHA1
bda7e496c297308dacf135761032c6d45f3e2b96
-
SHA256
3257ae21755978b902bfc1268fc0b8cd796ac782642fb4d1248a331c3efbfd6d
-
SHA512
61ff44375e1c0b9054e10c267b76fb284a90567d5f386c746d0c076a3c6899e99d532ba75ae54e5034db43cef7e96db13766712f8ed91bc452857ec577a4bf1d
-
SSDEEP
384:ZBKigLy9OwCmV8LJe98WzhcsaOGyQ7cdMrDrXo9vyXmoOV:nKFLZUV8LJelz2szGTlDTo9vyKV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dd24912e2c056b838b44a480aa41f13
Files
-
7dd24912e2c056b838b44a480aa41f13.dll windows:4 windows x86 arch:x86
10f3d79d58b682192f8341a87cba8795
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_CxxThrowException
__CxxFrameHandler
wcscmp
strstr
time
strrchr
fopen
isdigit
strchr
isspace
??1type_info@@UAE@XZ
urlmon
URLDownloadToFileA
shlwapi
PathFileExistsA
SHSetValueA
SHGetValueA
wininet
InternetCheckConnectionA
InternetCrackUrlA
InternetSetOptionA
kernel32
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentProcessId
GetEnvironmentVariableA
CreateProcessA
lstrlenA
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
Sleep
DisableThreadLibraryCalls
GetModuleFileNameA
CreateFileA
GetTickCount
CreateThread
CloseHandle
ReadFile
SetFilePointer
GetFileSize
user32
wvsprintfA
GetMessageA
DispatchMessageA
TranslateMessage
ole32
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysAllocStringLen
VariantClear
SysAllocString
SysFreeString
Exports
Exports
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ