Static task
static1
Behavioral task
behavioral1
Sample
980d4ff3ddc60959d439509003b6b849.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
980d4ff3ddc60959d439509003b6b849.dll
Resource
win10v2004-20231222-en
General
-
Target
980d4ff3ddc60959d439509003b6b849
-
Size
95KB
-
MD5
980d4ff3ddc60959d439509003b6b849
-
SHA1
52729259aa6161cb1550d9a2d7b2ee89ed4e20b2
-
SHA256
e4d3365b10d313919d0849c73435cb2f87d11d565477ea781eb16a3646a096d5
-
SHA512
d2f5f78183c6ea3929987ecba0bce447ad362bde6f5679af99cf2ae37cf7a1db5970ed9c5ee03a888c3816adee4bb6cefb08702dd1bdfa57c14b406a20160194
-
SSDEEP
1536:f4I8qLSebi0X9kRK9JKE4MKQ2/X3Uokrg4szvSk+v0itzwmne3INoHeK7BthB8:f43aNkGK82PUok8JvN6X0me3IiHTBq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 980d4ff3ddc60959d439509003b6b849
Files
-
980d4ff3ddc60959d439509003b6b849.dll windows:5 windows x86 arch:x86
fa28667c771c16b113803eb15702e649
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlGetLocationW
StrFromTimeIntervalW
StrFromTimeIntervalA
StrDupW
UrlUnescapeW
UrlCombineW
UrlHashW
UrlGetPartW
StrFormatByteSize64A
user32
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
TranslateMessage
DispatchMessageW
GetDC
advapi32
RegOpenKeyA
Sections
.text Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 75KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RI Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ