wlroek
Static task
static1
Behavioral task
behavioral1
Sample
d6cb3f1a35c30f0efba6d259106a132e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6cb3f1a35c30f0efba6d259106a132e.dll
Resource
win10v2004-20240226-en
General
-
Target
d6cb3f1a35c30f0efba6d259106a132e
-
Size
432KB
-
MD5
d6cb3f1a35c30f0efba6d259106a132e
-
SHA1
b71619ae426d54c786c03bad5c6d175082a3b6ee
-
SHA256
e9488009d5c652b45ce3c4fb0f9f0a7c761697b22c193b89f5a1ef66835bfc90
-
SHA512
cdf5cb9dbc7e155e3474a6ce8098f92dba2d360f187a0c14a9eacd73a78f8c90a5eaa96f85ba46bc7cb01b98df64b8e6e234fd80bddd02de1c0fd666d4e74816
-
SSDEEP
6144:JLiZuifkGvqG9GeJIxaWK3muhf+OcLN/z/zBcsTZT57y6QaFu4Bi59:QZubGvqG9tJIMWK3mQ+OuBtTZT4aFu4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6cb3f1a35c30f0efba6d259106a132e
Files
-
d6cb3f1a35c30f0efba6d259106a132e.dll windows:4 windows x86 arch:x86
b813cf98966583b66cb2af43de06dabb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
SHEnumKeyExA
UrlCanonicalizeA
kernel32
SearchPathA
ExitProcess
GetComputerNameA
GetFileType
BackupSeek
lstrcmpA
lstrlenW
lstrlenA
SetCurrentDirectoryA
GetDriveTypeW
GetDriveTypeA
GetWindowsDirectoryW
GetSystemDirectoryW
GetSystemDirectoryA
GetComputerNameW
GetFileAttributesA
GetFileAttributesW
lstrcmpW
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentDirectoryA
advapi32
GetUserNameA
GetUserNameW
winmm
auxGetVolume
Exports
Exports
Sections
.code Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 998B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 364KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ