snamflu
Static task
static1
Behavioral task
behavioral1
Sample
d450f5f90a929d913b6edc74842d566f.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d450f5f90a929d913b6edc74842d566f.dll
Resource
win10v2004-20240226-en
General
-
Target
d450f5f90a929d913b6edc74842d566f
-
Size
17KB
-
MD5
d450f5f90a929d913b6edc74842d566f
-
SHA1
5179fe629a561f59b13b198e5fa3ec88ab86b9a4
-
SHA256
94541211dba4d548d722cf9a362646733b8b9f8455f62858629d4915e36598b7
-
SHA512
2f465dfe1671601531486106336b890ff79d474efcb709c7468a3e1bed6e4d6ae80ce7ef3379d118fcedc037cb68436823f8df63f1ba50cf1fe38bcec14f67b6
-
SSDEEP
384:+dQmGt9gdn8a57qtit8447dKyMbkYeZJoUFYkqS7:NSdn80az7dObk/Y2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d450f5f90a929d913b6edc74842d566f
Files
-
d450f5f90a929d913b6edc74842d566f.dll windows:4 windows x86 arch:x86
76b130870b285a95234680eefeac9f04
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
SendMessageW
CreateWindowExW
UpdateWindow
UnregisterHotKey
TranslateMessage
ShowWindow
SetWindowTextA
SetShellWindow
ReleaseDC
RegisterHotKey
RegisterClassExA
RegisterClassA
BeginPaint
MessageBoxA
LoadIconA
LoadCursorA
GetSystemMetrics
GetSysColorBrush
GetMessageA
GetDC
EndPaint
EnableWindow
DispatchMessageA
DefWindowProcA
CloseDesktop
ChangeMenuA
kernel32
HeapAlloc
GetModuleHandleW
lstrcpyA
lstrcatA
WriteFile
Sleep
SetFileApisToANSI
LocalFree
LocalAlloc
GetModuleHandleA
GetLocalTime
GetCommandLineA
ExitThread
ExitProcess
DeviceIoControl
DeleteFileA
CreateFileA
CloseHandle
Beep
AddConsoleAliasA
gdi32
GetDIBits
PaintRgn
GetClipBox
StretchBlt
CreateCompatibleDC
DeleteObject
DeleteDC
CreateDIBSection
SelectObject
ws2_32
WSASocketA
socket
setsockopt
recv
gethostbyname
ntdll
NtSetEvent
NtQuerySemaphore
NtPrivilegeCheck
NtCreatePort
RtlGetProcessHeaps
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ