Static task
static1
Behavioral task
behavioral1
Sample
d5aef68d7ec4c167a3545d87b020a8ad.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5aef68d7ec4c167a3545d87b020a8ad.dll
Resource
win10v2004-20240226-en
General
-
Target
d5aef68d7ec4c167a3545d87b020a8ad
-
Size
14KB
-
MD5
d5aef68d7ec4c167a3545d87b020a8ad
-
SHA1
48647cd0d5a0e43336eeb4533b98d8357dcfa774
-
SHA256
81df0d68d6e0c71f9eb61a29a2498b433d9dbfc54d8e28c7e2a82334b553ef0c
-
SHA512
738ac403f000100cef98bc3a5d29497ef28b9c5b23c633276ab9f0d18e74ee0bc7f92a12b28ec29bc19532898104d4b46d4f5020a5d84d2adf566bfc1f61104f
-
SSDEEP
384:shqYdd2sLYPM5k7xW01Kfmma2+WO+kK+E39/QX:sZdd2sGxW01zWOBK+E39/A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5aef68d7ec4c167a3545d87b020a8ad
Files
-
d5aef68d7ec4c167a3545d87b020a8ad.dll windows:4 windows x86 arch:x86
bc2ef71a5704ec8aa3263daf9e34a3db
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
Thread32Next
TerminateThread
GetThreadPriority
GetProcAddress
GetModuleHandleA
Thread32First
CreateToolhelp32Snapshot
GetPrivateProfileStringA
IsBadReadPtr
ExitProcess
SetLocalTime
GetLocalTime
ReadFile
GlobalLock
CreateFileA
ReadProcessMemory
WriteProcessMemory
GlobalUnlock
GlobalFree
GetCurrentProcessId
Sleep
SetThreadPriority
WaitForSingleObject
CloseHandle
GetCurrentProcess
VirtualProtectEx
GetModuleFileNameA
OpenMutexA
CreateMutexA
SetFilePointer
CreateThread
user32
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
msvcrt
free
_strlwr
_initterm
malloc
_adjust_fdiv
_stricmp
strcat
fopen
fread
strrchr
memset
strlen
strcpy
sprintf
memcpy
??2@YAPAXI@Z
fclose
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ