Static task
static1
Behavioral task
behavioral1
Sample
7f28a90f36c1a5d02d9b8426eb76d656.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f28a90f36c1a5d02d9b8426eb76d656.dll
Resource
win10v2004-20231215-en
General
-
Target
7f28a90f36c1a5d02d9b8426eb76d656
-
Size
145KB
-
MD5
7f28a90f36c1a5d02d9b8426eb76d656
-
SHA1
e84395349a69f7a7aba64e7edcf78e50f781fe32
-
SHA256
e88e63845d962e77d2661ee17888aa0cbd97c025cf754d0f391c076d1fc14b92
-
SHA512
582884c63bce3c3eb070b448638b19a2861a4b9694ebaf0459f3bdee40277940ec54b0551092d751ab507ed4513de42fcc4d09439da814b623457192a434ff58
-
SSDEEP
3072:leb+FR4Ep9eyVJluskEdkg4nUOnNL/RAZOkXW2P1Uepl6:1KeJlLur55COkmc1Uol
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f28a90f36c1a5d02d9b8426eb76d656
Files
-
7f28a90f36c1a5d02d9b8426eb76d656.dll windows:5 windows x86 arch:x86
76070c6ad7163d1c3d9a4b4a41ae254e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetAsyncKeyState
gdi32
DeleteDC
Sections
.MPRESS1 Size: 141KB - Virtual size: 928KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE