Static task
static1
Behavioral task
behavioral1
Sample
cc60eb751e89034aad84bec8b316ce8c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cc60eb751e89034aad84bec8b316ce8c.dll
Resource
win10v2004-20240226-en
General
-
Target
cc60eb751e89034aad84bec8b316ce8c
-
Size
96KB
-
MD5
cc60eb751e89034aad84bec8b316ce8c
-
SHA1
2a3544f59600e143af4aa85c016cf64fc9962959
-
SHA256
35e34d5ca77fba03a99e26838c7fab4af91296ff897fcb7b1cf85b119876871c
-
SHA512
c9f84f9709fb09eb3a7838d7d002437bfd60f513ac19e3f5a1c629107ebfefb0a953d58d92a9d5521865a9ffe63dded3bec0c5f15a1f6bc7fa2c825549f2e64e
-
SSDEEP
3072:nDOsnQ8C+SgZAeX32wp937AmxTOC7NocT:q/gudQ0n4+cT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc60eb751e89034aad84bec8b316ce8c
Files
-
cc60eb751e89034aad84bec8b316ce8c.dll windows:4 windows x86 arch:x86
415163c64eeaf3e1d310b6e7dde21455
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetUserDefaultLCID
MulDiv
InterlockedExchangeAdd
GetComputerNameA
VirtualProtect
GetTickCount
InterlockedIncrement
LoadLibraryA
IsDBCSLeadByte
Sleep
GetSystemTimeAsFileTime
GetLastError
IsBadReadPtr
GetCurrentProcess
VirtualAlloc
user32
GetWindowInfo
GetLastActivePopup
GetWindow
GetCursor
IsWindowUnicode
GetClientRect
IsCharUpperA
GetWindowRgn
GetWindowThreadProcessId
IsWindowVisible
GetGUIThreadInfo
GetParent
IsMenu
InSendMessage
GetForegroundWindow
IsClipboardFormatAvailable
GetTitleBarInfo
advapi32
IsValidSecurityDescriptor
InitializeSecurityDescriptor
msvcrt
_itoa
srand
rand
_adjust_fdiv
malloc
_initterm
free
memchr
_swab
time
floor
modf
_pctype
_isctype
__mb_cur_max
__doserrno
_CIcosh
_CIasin
_CIfmod
_CItanh
div
_ltoa
_ultoa
gdi32
GetPixel
GdiFlush
GdiGetBatchLimit
GetBitmapDimensionEx
GetStretchBltMode
ole32
CoDosDateTimeToFileTime
shell32
ord680
ord66
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ