Static task
static1
Behavioral task
behavioral1
Sample
8ff933e6c39191c844e0eb5ad7e18c40.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8ff933e6c39191c844e0eb5ad7e18c40.dll
Resource
win10v2004-20231215-en
General
-
Target
8ff933e6c39191c844e0eb5ad7e18c40
-
Size
50KB
-
MD5
8ff933e6c39191c844e0eb5ad7e18c40
-
SHA1
9727eb9754df90e54087f10928f73efa39e60968
-
SHA256
9c8af0d445ee8a08028e1a9928cfeee386fb5a83056a8fc60cb1ff6e5e2fe68e
-
SHA512
5e7995df41aeb63a3e35b0717d889aa65d83d680723da75e1a3c96b3d3b26fa14492bfa1a8454bff91a10ba9e9ce4aabda652ee834f6ef2d3968da8bf0ee5d4e
-
SSDEEP
768:GD2yvAxCvoIwzAoYU8rMda19P8da1/NGel/tkF30mjzjOTnXe33D7Uq0ZSS5N1pS:GyEgbIQda1xnUF30Mvmnef9C1p2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ff933e6c39191c844e0eb5ad7e18c40
Files
-
8ff933e6c39191c844e0eb5ad7e18c40.dll windows:4 windows x86 arch:x86
2a9c370e9b96381397ec4c876cc12fbc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenW
LoadLibraryExA
LoadLibraryExW
GetModuleFileNameA
GetModuleFileNameW
RaiseException
LoadLibraryA
FreeLibrary
SetLastError
LocalAlloc
FormatMessageA
InterlockedCompareExchange
GetCurrentThreadId
LeaveCriticalSection
GetProcessHeap
HeapFree
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetLastError
LocalFree
VirtualProtect
advapi32
RegSetValueExA
RegSetValueExW
RegCreateKeyExA
RegCreateKeyExW
RegCloseKey
msvcrt
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
__CxxFrameHandler
_except_handler3
msvcp60
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ