Static task
static1
Behavioral task
behavioral1
Sample
Packed.Win32.Salpack.dll
Resource
win7-20240221-en
General
-
Target
Packed.Win32.Salpack.e-9cba23e62607106638fbefce00cebfd267791bca3ac8289d7ec5ec2a346d0c28
-
Size
120KB
-
MD5
d1aa87b843048ddaaa60250a8d2356ee
-
SHA1
99193bc74f0b9450211d78902a7b281aa45f45fe
-
SHA256
9cba23e62607106638fbefce00cebfd267791bca3ac8289d7ec5ec2a346d0c28
-
SHA512
fd885290957f4186ce12c536fa6b4b46890f172d52703bf8fc84dd5b03bae4336b429521f51baf335bd2c3eacc14159dc45f676eae1e9c97d2db096b51d8aa5c
-
SSDEEP
3072:70IxCoyignbh6wL9cjPIR7axm3Bg5MDzZr4yD7a:3xCoyPbhJatm32YVz7a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Packed.Win32.Salpack.e-9cba23e62607106638fbefce00cebfd267791bca3ac8289d7ec5ec2a346d0c28
Files
-
Packed.Win32.Salpack.e-9cba23e62607106638fbefce00cebfd267791bca3ac8289d7ec5ec2a346d0c28.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ