Static task
static1
Behavioral task
behavioral1
Sample
8f5baf7d0a144d229177587868aad5f3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f5baf7d0a144d229177587868aad5f3.dll
Resource
win10v2004-20231215-en
General
-
Target
8f5baf7d0a144d229177587868aad5f3
-
Size
19KB
-
MD5
8f5baf7d0a144d229177587868aad5f3
-
SHA1
1aa60f6d25afabcd5d7ae7d9417bbde43b336935
-
SHA256
4c86399b750483ba2449245295f8fe7ea20f8726b8770ee962fdf581f92d73f5
-
SHA512
ae5b7e2ff6106035f1428407d0b1e216225017226e1f6e4aa2c2014a8a388d82fc23ddb1fa739c20dc7935d1f9ffd1a98bc8188777d086cbd4fed99c0b99484b
-
SSDEEP
384:FUtMaarehELe1N6IXsbhjOY1YgJpJgLa0MpHS2OI:FUsrzLehXstCvggLa1sr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f5baf7d0a144d229177587868aad5f3
Files
-
8f5baf7d0a144d229177587868aad5f3.dll windows:4 windows x86 arch:x86
3e793b146a2b2cbd447e5dd7bf04d13b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
shell32
ord680
advapi32
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegNotifyChangeKeyValue
user32
UnhookWindowsHookEx
SetWindowsHookExA
SetWindowTextA
GetWindowTextA
GetFocus
GetClassNameA
FindWindowA
EnumChildWindows
CharLowerBuffA
CallWindowProcA
CallNextHookEx
wsprintfA
MessageBoxA
kernel32
FreeLibrary
GetModuleFileNameA
lstrcpynA
lstrlenA
lstrcpyA
lstrcmpA
lstrcatA
VirtualProtect
VirtualFree
VirtualAlloc
Sleep
RtlFillMemory
LoadLibraryA
ExitThread
GetVolumeInformationA
GetTempPathA
GetSystemInfo
GetProcAddress
CloseHandle
CreateThread
ExitProcess
GetModuleHandleA
shlwapi
StrToIntA
StrStrA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ