getSpot
Static task
static1
Behavioral task
behavioral1
Sample
b8a171281061a6de35532db66dc7ef72.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8a171281061a6de35532db66dc7ef72.dll
Resource
win10v2004-20240226-en
General
-
Target
b8a171281061a6de35532db66dc7ef72
-
Size
29KB
-
MD5
b8a171281061a6de35532db66dc7ef72
-
SHA1
daae84f1e6980049e29ec357001e733b3a0ac431
-
SHA256
f3cb59b73f6c3b56ae299bb08e8b715245d8fbdeb5809024c8606f84a8fd08be
-
SHA512
69d5f95bca4565e576755c122ece8aa6538d3d633309fbba6bf95e0151a7d3cd891967f4b9f5a4d29698f9a0479f27913002632eabfabf4115e099df611dc9d9
-
SSDEEP
768:u861gfM1/i1sm07+EKS1duURwT/MRvs0yzMj:LOgU16s31AURwT4szzM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8a171281061a6de35532db66dc7ef72
Files
-
b8a171281061a6de35532db66dc7ef72.dll windows:5 windows x86 arch:x86
e7ae4e0fce4b805207898ad747176305
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetWindowsHookExW
ntdll
NtQueryInformationThread
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE