FURONGJIEJIE
Static task
static1
Behavioral task
behavioral1
Sample
b8c614079cb533c57525ce68af4e9f31.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8c614079cb533c57525ce68af4e9f31.dll
Resource
win10v2004-20240226-en
General
-
Target
b8c614079cb533c57525ce68af4e9f31
-
Size
19KB
-
MD5
b8c614079cb533c57525ce68af4e9f31
-
SHA1
4b21493c757e5a38d60d5783fe80754856812647
-
SHA256
597b2b89324ee10f7307d63cc531ece0d0b01fae2fc881471a9daa0298a3e3f7
-
SHA512
aab1a8063cfb4864c3e9ec4f4ae4d9616192e3398cd42896696f318f7b368db45622ea70403be307299eaec8eb4027e03c3f0f5caa2718e9fe099d5515e91916
-
SSDEEP
384:Ab+90lThglIP6yaBxrsA2z3BVbGVVkGtdv5tMXRUA7ZGV00S3:AbG0zg2CxsYMUA7ZGV00m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8c614079cb533c57525ce68af4e9f31
Files
-
b8c614079cb533c57525ce68af4e9f31.dll windows:4 windows x86 arch:x86
9b49cecb26114106f3ea6ca8a3ef7321
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
OutputDebugStringA
Sleep
LoadLibraryA
WriteProcessMemory
ExitThread
CreateThread
GetFileSize
ReadFile
CreateProcessA
GetModuleHandleA
ReadProcessMemory
GetProcAddress
GetSystemDirectoryA
Thread32Next
TerminateThread
Thread32First
CloseHandle
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
user32
DispatchMessageA
TranslateMessage
CallNextHookEx
SetWindowsHookExA
GetMessageA
wininet
InternetCloseHandle
InternetConnectA
HttpSendRequestW
HttpSendRequestA
HttpOpenRequestA
InternetOpenA
msvcrt
free
malloc
_except_handler3
sprintf
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ