Activate
Static task
static1
Behavioral task
behavioral1
Sample
04935d89c1acd721853b4c5752e06b31d20bf223da22a26d1c251da197416d09.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04935d89c1acd721853b4c5752e06b31d20bf223da22a26d1c251da197416d09.dll
Resource
win10v2004-20240226-en
General
-
Target
04935d89c1acd721853b4c5752e06b31d20bf223da22a26d1c251da197416d09
-
Size
30KB
-
MD5
f851491edcf15b42466f6e0bb8625c53
-
SHA1
9896a07c1180a7b1dfbaceae033ce678f1615a17
-
SHA256
04935d89c1acd721853b4c5752e06b31d20bf223da22a26d1c251da197416d09
-
SHA512
f9ce479ef3aebf1c9fd80ddf61d580f75ac2c84d28872565f8a3c4b081433bd88be52ffe10e44c6d66bd02833d83fccea5fb27fde6a85c97c6c60e32a947df53
-
SSDEEP
384:XVmP1F4H58AGYorTj3P+jgyJmKUG/+G/JtE//E/h/mR7HWiRXTcj1VXTuwko5iFn:0mHxKzm/mKUG/+G/JtE//E/h/GaF3dx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04935d89c1acd721853b4c5752e06b31d20bf223da22a26d1c251da197416d09
Files
-
04935d89c1acd721853b4c5752e06b31d20bf223da22a26d1c251da197416d09.dll windows:4 windows x86 arch:x86
e37d55f40a74090774e0e0627658e449
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
WSACleanup
WSAStartup
recv
closesocket
send
gethostbyname
htons
socket
connect
kernel32
WriteFile
OpenEventA
SetEvent
GetTickCount
lstrcatA
lstrlenA
GetWindowsDirectoryA
GetSystemDirectoryA
lstrcmpiA
lstrcpyA
lstrcpynA
GetSystemTime
GlobalFree
GlobalAlloc
lstrcmpA
DeleteFileA
GetTempFileNameA
GetTempPathA
WinExec
GetModuleFileNameA
CloseHandle
RtlUnwind
CreateFileA
CreateProcessA
GetLastError
FindClose
FileTimeToSystemTime
FindFirstFileA
GetComputerNameA
Sleep
CreateMutexA
ExitProcess
CreateThread
VirtualQuery
user32
CallNextHookEx
SetWindowsHookExA
wsprintfA
CharLowerA
SendMessageA
advapi32
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
Exports
Exports
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ