Static task
static1
Behavioral task
behavioral1
Sample
9b1c768984ec65ecf5f8a30d4ff31056.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9b1c768984ec65ecf5f8a30d4ff31056.dll
Resource
win10v2004-20231215-en
General
-
Target
9b1c768984ec65ecf5f8a30d4ff31056
-
Size
760KB
-
MD5
9b1c768984ec65ecf5f8a30d4ff31056
-
SHA1
c03ae20b877a22a7a3e90ddd1e66046bd89f2c05
-
SHA256
940a4c8c63e7c3a89216d4d1adbf6c9049ffa6fccdcbabeca51cadcabd83bcbe
-
SHA512
2ae1d90a92f6350193e7d9e1e4ac1750c3d697f17984bfa448d01c8131b33b93ca0788a45b3ca92d512df7a4067cbd1685b3c0bf6126e5839c2df2950f575da1
-
SSDEEP
192:IA6aIHlgrxCLxJttUQCRo7YkXexQ74JZBLUH1RfHO9oxA0NNmBiMTJ84ew8CpH5l:IAHS3xbt+Rxui4EoLSmw8+5yKYIhV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b1c768984ec65ecf5f8a30d4ff31056
Files
-
9b1c768984ec65ecf5f8a30d4ff31056.dll windows:4 windows x86 arch:x86
25bac38c5cf9c1059c730a842673deb8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsBadReadPtr
ReadFile
GetFileSize
CreateFileA
GetPrivateProfileStringA
GetCurrentProcessId
GetTickCount
SetFilePointer
HeapAlloc
GetProcessHeap
VirtualProtect
LoadLibraryA
Process32First
CreateToolhelp32Snapshot
Module32Next
Module32First
OpenProcess
GetLastError
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetProcAddress
SetEvent
CloseHandle
GetModuleFileNameA
Sleep
GetCurrentProcess
TerminateProcess
OpenEventA
CreateEventA
Process32Next
CreateThread
user32
IsWindowVisible
wsprintfA
BroadcastSystemMessageA
SetWindowsHookExA
CallNextHookEx
GetWindowThreadProcessId
FindWindowA
GetWindowTextA
GetWindowLongA
FindWindowExA
wvsprintfA
advapi32
RegQueryValueExA
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA
ws2_32
closesocket
msvcrt
isdigit
_strcmpi
_adjust_fdiv
_initterm
realloc
_except_handler3
memcpy
strrchr
strcpy
strcat
strlen
free
sprintf
atoi
memset
strncpy
_strlwr
strchr
strstr
malloc
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ