ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
7ff7d78049bcab0af684725c817ac032.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7ff7d78049bcab0af684725c817ac032.dll
Resource
win10v2004-20231215-en
General
-
Target
7ff7d78049bcab0af684725c817ac032
-
Size
68KB
-
MD5
7ff7d78049bcab0af684725c817ac032
-
SHA1
875b94d9cc180eb554635d607085426cf17352bf
-
SHA256
e19596cc6553041f585570c0be9ac74bf0a9f054359b1a226aad36075268e959
-
SHA512
858d6951284fd00080341ad361c9175f6081f92fb20d17d1549f9167d76971aa9884ce8b39326387040a7739f743a0a5cdfcb280bfaadb44a2418e6d74fc3713
-
SSDEEP
1536:muvvSrr98PxRYcact+J2TN/ZPTYjQOswkCkE:muvvYp8ZRvtR/ZUjQokCkE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ff7d78049bcab0af684725c817ac032
Files
-
7ff7d78049bcab0af684725c817ac032.dll windows:4 windows x86 arch:x86
4496a9dcf554357683220eb154c562ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FindFirstFileA
ExpandEnvironmentStringsA
GetModuleFileNameA
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetFileAttributesA
CloseHandle
CreateFileA
SetFileTime
WriteFile
ReadFile
SetFilePointer
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateDirectoryA
user32
wsprintfA
msvcrt
_snprintf
memset
memcpy
??2@YAPAXI@Z
free
malloc
calloc
strcmp
strcat
strcpy
_mbsstr
_initterm
_adjust_fdiv
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ