SfcGetFiles
Static task
static1
Behavioral task
behavioral1
Sample
bf7b7ea88c0d2032f6cde6b0a6a8df5b.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf7b7ea88c0d2032f6cde6b0a6a8df5b.dll
Resource
win10v2004-20240226-en
General
-
Target
bf7b7ea88c0d2032f6cde6b0a6a8df5b
-
Size
1.5MB
-
MD5
bf7b7ea88c0d2032f6cde6b0a6a8df5b
-
SHA1
7deadee658923380422a381c919a94a61b79f27b
-
SHA256
3e21b2a5b0a8f87ce3d7bcdca803bb4445165dcbb2d4d89932d1a7b42fb0f929
-
SHA512
e64d0df5311fc0436a4b9f7f3f7515d6a2166d30313c8c0b576cad593a29ae04c603c7aae78689338d9bfcd34e0d57f912e2fca664c704c3df64e340f8a9d0e5
-
SSDEEP
3072:2hit6Y/ae9PcH/cxeKXkvqFB9l/KuYwKf4rllHK7S5IeMaTPF7kNm:Lt6Y//BNB9lY45aSnLF7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf7b7ea88c0d2032f6cde6b0a6a8df5b
Files
-
bf7b7ea88c0d2032f6cde6b0a6a8df5b.dll windows:4 windows x86 arch:x86
afdacb2555bfda5dcc43fe3d9df13e7e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentThreadId
GetDateFormatA
GetEnvironmentVariableA
GetFileAttributesA
GetLocaleInfoA
GetTickCount
GlobalAlloc
GlobalFree
InitializeCriticalSection
LoadLibraryA
Sleep
WaitForSingleObject
GetComputerNameA
EnterCriticalSection
DeleteFileA
CreateThread
CreateFileA
CreateEventA
CompareStringA
LeaveCriticalSection
CloseHandle
advapi32
RegSetValueA
RegQueryValueExA
RegQueryValueA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
user32
AdjustWindowRectEx
AppendMenuA
CallWindowProcA
CharNextW
CheckDlgButton
MessageBoxA
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 925B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ