StoreProtect
Static task
static1
Behavioral task
behavioral1
Sample
9683b083c2edefe697ace9ccf9a2b71d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9683b083c2edefe697ace9ccf9a2b71d.dll
Resource
win10v2004-20231215-en
General
-
Target
9683b083c2edefe697ace9ccf9a2b71d
-
Size
9KB
-
MD5
9683b083c2edefe697ace9ccf9a2b71d
-
SHA1
957bc6676db6fe173dbbb4efa58158da6271982c
-
SHA256
11cb7f8845c52e85a2fe7575bed517645dc487bef48efd813a3d9706af8d66cc
-
SHA512
85df9493a2a971547c00505b50389ad89ea63973c7199bf9b95be5df7a9f7eb2a8be4ea0e8c4b3a67720f2124b8d1f003e6c00d680ce6d93f51d40927245f3f4
-
SSDEEP
192:tEJjqXcbWcwPqtC/KHVy4AwOkHOiP1oyn6AllL:WJqXcbWcwPqk/KHV9oM18Al9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9683b083c2edefe697ace9ccf9a2b71d
Files
-
9683b083c2edefe697ace9ccf9a2b71d.dll windows:4 windows x86 arch:x86
f08b03fe8c1a51c724422855e397873f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
msvcrt
_adjust_fdiv
malloc
_initterm
free
kernel32
CreateFileA
CreateMutexA
GetLastError
ReleaseMutex
ExitProcess
CreateThread
Sleep
GetTempPathA
GetTempFileNameA
GetStartupInfoA
CreateProcessA
FindResourceA
FreeResource
CloseHandle
WriteFile
LockResource
LoadResource
SizeofResource
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 823B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 218B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ