SystemService
Static task
static1
Behavioral task
behavioral1
Sample
b32a43ac11c4278a4401d34a83b9cbc8.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b32a43ac11c4278a4401d34a83b9cbc8.dll
Resource
win10v2004-20240226-en
General
-
Target
b32a43ac11c4278a4401d34a83b9cbc8.bin
-
Size
336KB
-
MD5
b32a43ac11c4278a4401d34a83b9cbc8
-
SHA1
626872c4644a82560e9acfa90873bf7e7609176f
-
SHA256
f28cf149c0f4d787dbf1327fb345532a1219245db3da3bd5df4ae6b94a760d33
-
SHA512
087c457623e71991870f3568ee67d78bdc56aa2c07c11b814227e57025b5fef3514b604f96d6a1d3651475c1d15a40c4df460bf2ce3d8780c0a3573f3cffec50
-
SSDEEP
6144:AEQdOPx0GB6s0NQsB3CaBxQl7/B5LtqOhHJ:AEg0BB6s6SaBxu5BqOhHJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b32a43ac11c4278a4401d34a83b9cbc8.bin
Files
-
b32a43ac11c4278a4401d34a83b9cbc8.bin.dll windows:4 windows x64 arch:x64
9241099284fc9d96fa2c79e30eb61de7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
FreeLibrary
GetTimeFormatW
LoadLibraryA
lstrcpynA
GetLastError
DeactivateActCtx
GetSystemTime
LocalAlloc
RaiseException
secur32
QueryContextAttributesW
SealMessage
UnsealMessage
QueryContextAttributesA
glu32
gluQuadricTexture
gluOrtho2D
gluNurbsCallback
gluNurbsCurve
gluPartialDisk
gluTessCallback
gluQuadricCallback
gluPerspective
gluNewQuadric
gluTessBeginContour
gluGetString
gluScaleImage
gluQuadricNormals
gluBeginTrim
schannel
SpUserModeInitialize
SslGetMaximumKeySize
SpLsaModeInitialize
SslCrackCertificate
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ