Static task
static1
Behavioral task
behavioral1
Sample
887108d44324470a539b12365948acbe3efa68c042b2ff0abf6d1bc56b350a59.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
887108d44324470a539b12365948acbe3efa68c042b2ff0abf6d1bc56b350a59.dll
Resource
win10v2004-20240226-en
General
-
Target
3672a81eab6f275ee4c1c295095d72a2.bin
-
Size
688KB
-
MD5
16c00c6df3c1f924883079469ca27c9c
-
SHA1
fbfaff17b577924cd6d11386911d855bb668ec94
-
SHA256
893282a9c8c0a221639b13398bac5a3fadb49371cff2b95c730ef3c3ba95f787
-
SHA512
c14612d962edd09c1667c00abc9de7ab26f7d498b2a00fd4b3d490e3068228c7bda5be21b5f3033d730d363bbc49d37f3333493b464127b6b9702af6f142a16c
-
SSDEEP
12288:sqrJcEALtvOULaZPoYsC/IXouIoK4rPD1aOzQvm0JayC3lXkh27Tx:D1c3Ltvr6oYB/IVrLB/gNh2Px
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/887108d44324470a539b12365948acbe3efa68c042b2ff0abf6d1bc56b350a59.dll
Files
-
3672a81eab6f275ee4c1c295095d72a2.bin.zip
Password: infected
-
887108d44324470a539b12365948acbe3efa68c042b2ff0abf6d1bc56b350a59.dll.dll windows:6 windows x86 arch:x86
Password: infected
0a63182905d4cb67d3f1698721e3b052
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
OpenProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
advapi32
CreateProcessAsUserA
ws2_32
send
iphlpapi
GetAdaptersInfo
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 531KB - Virtual size: 531KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c0 Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c1 Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ