Static task
static1
Behavioral task
behavioral1
Sample
07de2e74ad0d4f979e5d40276151d19a11db4a463435650ba85056647037dc34.dll
Resource
win7-20240221-en
General
-
Target
07de2e74ad0d4f979e5d40276151d19a11db4a463435650ba85056647037dc34
-
Size
120KB
-
MD5
5fccba2c81a1ce9e514d6349171c0419
-
SHA1
2c039af667d1766109af6188685a032f579d9dd1
-
SHA256
07de2e74ad0d4f979e5d40276151d19a11db4a463435650ba85056647037dc34
-
SHA512
95625852823c6b503c707dd459e31ea1411299bd6edadf03a665d4aa0ad5c1c2224e2d1b0852cb8e5081ba79dae5655f5859e39a630d58e8c498910f6e386e3b
-
SSDEEP
1536:UKyms0Sp1N71k2O6QVJ+UwcTGzfyc7bQ/+yUwMJ1ofU0GXycSVzJvQ5PLI3:UKMd1N7F8Jtwzc/bHM/ofmXyTVzJwk3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 07de2e74ad0d4f979e5d40276151d19a11db4a463435650ba85056647037dc34
Files
-
07de2e74ad0d4f979e5d40276151d19a11db4a463435650ba85056647037dc34.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ