Static task
static1
Behavioral task
behavioral1
Sample
8ed2575a839b8e5d67a71b1291e01c72.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8ed2575a839b8e5d67a71b1291e01c72.dll
Resource
win10v2004-20231215-en
General
-
Target
8ed2575a839b8e5d67a71b1291e01c72
-
Size
60KB
-
MD5
8ed2575a839b8e5d67a71b1291e01c72
-
SHA1
e98586e705ddbd468d6bfeab04e2062232941c63
-
SHA256
e36dde469b9f12a745e3a7be616227ba777949bab19fc6a0b94da57b9ed770aa
-
SHA512
24a063741ad19b2ed7c34b7b73a147562f9dd34dd4168fa52b2d60d9b4364584554ff5fc5cdb3f35a88a581cc8bda270dcd048a481607a824251170c8326d3a0
-
SSDEEP
1536:OEipPjGZMlpdf0Ed9jmvnToIfMIOPCu1qlpM5ZL30Mx:WpiZMlpdMMaTBfCPCLM5SMx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ed2575a839b8e5d67a71b1291e01c72
Files
-
8ed2575a839b8e5d67a71b1291e01c72.dll windows:4 windows x86 arch:x86
79d08a14f06a14295336eb5beaa9e157
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcess
ReleaseMutex
CreateMutexA
FreeLibrary
SleepEx
CreateThread
SetLastError
lstrlenA
CloseHandle
FindFirstFileA
Sleep
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
SetFilePointer
GetCurrentThread
GetLastError
LoadLibraryA
advapi32
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
LookupAccountSidA
msvcrt
fread
fwrite
ftell
fseek
fclose
fopen
free
strcat
strncpy
memset
strcmp
strlen
_snprintf
strcpy
calloc
_except_handler3
_local_unwind2
strstr
fgets
time
memmove
strftime
localtime
rand
srand
tolower
_pctype
_isctype
__mb_cur_max
strchr
atoi
_initterm
_adjust_fdiv
memcpy
malloc
_stricmp
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE