Static task
static1
Behavioral task
behavioral1
Sample
9708f2479636ed899a51be99919218a0.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9708f2479636ed899a51be99919218a0.dll
Resource
win10v2004-20231215-en
General
-
Target
9708f2479636ed899a51be99919218a0
-
Size
23KB
-
MD5
9708f2479636ed899a51be99919218a0
-
SHA1
7761a1bd864083c9553ea05d0e33ff2df5c4519c
-
SHA256
c2549d5797b11e346784950c1960dca31e2a03618aa5b4e958930682f8a2d99d
-
SHA512
dc0a13ba0cd8528dacbaca33799f40511bd1d50ce7f464a1699cc8f0bacfad6d88a05280ff12e3c0ad2e094ea13921814bb8dd5d7575af93e75f6009592a3594
-
SSDEEP
384:qtdcEjffHFk4Pefu9qSn17ttjun2zcsP32CRB9MV5MG5xJaT2:qtvfdk4PefgqSjhB2QB9MrMsAT2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9708f2479636ed899a51be99919218a0
Files
-
9708f2479636ed899a51be99919218a0.dll windows:4 windows x86 arch:x86
66b3702c59862006df290e8f68ecda3f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
GetVersionExA
ExitThread
TerminateThread
WaitForMultipleObjects
Process32Next
Process32First
CreateToolhelp32Snapshot
GetLastError
ReadFile
CreateMailslotA
WaitForSingleObject
lstrcatA
CreateThread
GetSystemDirectoryA
CreateDirectoryA
GetTickCount
GetTempFileNameA
DeleteFileA
GetFileAttributesA
lstrlenA
HeapFree
OpenProcess
GetProcessHeap
lstrcmpiA
SetFilePointer
CreateMutexA
EnterCriticalSection
LeaveCriticalSection
ReleaseMutex
SetEndOfFile
InitializeCriticalSection
DeleteCriticalSection
CreateEventA
lstrcmpA
ResetEvent
CompareStringA
CompareStringW
lstrlenW
lstrcpyA
HeapAlloc
HeapReAlloc
CreateFileA
WriteFile
CloseHandle
SetEvent
user32
wsprintfA
advapi32
RegNotifyChangeKeyValue
CryptDeriveKey
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
CryptCreateHash
CryptAcquireContextA
CryptDecrypt
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegSetValueExA
OpenProcessToken
CreateProcessAsUserA
RegQueryValueExA
RegCreateKeyExA
CryptHashData
wininet
InternetConnectA
HttpOpenRequestA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
HttpSendRequestA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ