Static task
static1
Behavioral task
behavioral1
Sample
d55cdad0fea1cf4bde52b40a7e77f0f8.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d55cdad0fea1cf4bde52b40a7e77f0f8.dll
Resource
win10v2004-20240226-en
General
-
Target
d55cdad0fea1cf4bde52b40a7e77f0f8
-
Size
41KB
-
MD5
d55cdad0fea1cf4bde52b40a7e77f0f8
-
SHA1
26d382c4554d80260a95cd99a09bb2bf07dd0df2
-
SHA256
c1b18c8a221887374905f66667dda764d54677299e5e49bd4fb817d0fe8f1e2b
-
SHA512
7045a17a2d37db2a45cc70d50d42ba78320b0255a7856161d02dc8c1dd14425a7f06ed965ae3aba02d140139d2b8dc7500b79734f212820e250346582d163291
-
SSDEEP
768:iCZNHgJY3hpsphK6knw8IUAMmcoyd7AQbjbFIMLjvM1zanAqmfl3d3iIk/MgunGT:iSNHBhpKM6knw8IUAMmcos7A+/FIMLjl
Malware Config
Signatures
Files
-
d55cdad0fea1cf4bde52b40a7e77f0f8.dll windows:4 windows x86 arch:x86
8c1ed91180d6eaa4dbbcf3e22f9db0dc
Code Sign
38:7d:56:db:4f:6f:01:af:42:b5:4d:1c:76:35:ba:baCertificate
IssuerCN=Intel corp.Not Before31/12/2009, 21:00Not After31/12/2016, 21:00SubjectCN=Intel corp.d3:ca:ed:99:f0:d0:49:17:d1:c0:d3:f5:41:1d:d4:84:d3:75:0d:bcSigner
Actual PE Digestd3:ca:ed:99:f0:d0:49:17:d1:c0:d3:f5:41:1d:d4:84:d3:75:0d:bcDigest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTempPathA
SetFilePointer
ExpandEnvironmentStringsA
lstrcatA
TerminateProcess
ExitProcess
GetCurrentProcess
lstrcatW
GetTempPathW
LoadLibraryA
lstrlenW
user32
GetDesktopWindow
advapi32
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
shell32
ShellExecuteA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 314B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ