Start
Static task
static1
Behavioral task
behavioral1
Sample
21e8191cdeeeb4cfee6dca2ad2e91a23d9d00e7f218a81ff8a8d17b4c4066dc7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21e8191cdeeeb4cfee6dca2ad2e91a23d9d00e7f218a81ff8a8d17b4c4066dc7.dll
Resource
win10v2004-20240226-en
General
-
Target
21e8191cdeeeb4cfee6dca2ad2e91a23d9d00e7f218a81ff8a8d17b4c4066dc7
-
Size
21KB
-
MD5
6e5859fda4fdefa856b45d036edf3b14
-
SHA1
3f03889653ad4b04309d570f3b9d23a4ae7a6277
-
SHA256
21e8191cdeeeb4cfee6dca2ad2e91a23d9d00e7f218a81ff8a8d17b4c4066dc7
-
SHA512
79f99a496b4cf02b6e19b3c0b7d99c9f881e59b45bb7830fd99d9eb86e7d0d37650f55aba177b59953c439a3eabeaae0130fc83295bc2c39a5b6e1acabd7bd02
-
SSDEEP
384:zXOi3mlzA//ykT68v5U/P6dexwL9Y89SFSUpxzUKxwDMJtE+IaqJp2:zXdWlA//lvBdJMFSUpxzUKx4oE+ILb2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21e8191cdeeeb4cfee6dca2ad2e91a23d9d00e7f218a81ff8a8d17b4c4066dc7
Files
-
21e8191cdeeeb4cfee6dca2ad2e91a23d9d00e7f218a81ff8a8d17b4c4066dc7.dll windows:4 windows x86 arch:x86
35e4afb0e70eaeb3bd9226f4009bffab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42
ord922
ord4204
ord6874
ord940
ord535
ord926
ord924
ord354
ord5186
ord1979
ord6385
ord3318
ord5442
ord665
ord939
ord941
ord860
ord2818
ord540
ord825
ord858
ord800
ord537
ord823
msvcrt
_adjust_fdiv
_initterm
malloc
free
_mbscmp
fread
sprintf
_strlwr
_beginthreadex
strstr
fclose
fprintf
_strdate
_strtime
fopen
_vsnprintf
strchr
rand
srand
time
strrchr
__CxxFrameHandler
_strnicmp
kernel32
ExitProcess
GetModuleFileNameA
FreeLibrary
ReadFile
SetFilePointer
Sleep
GetProcAddress
LoadLibraryA
CreateFileA
GetTickCount
OutputDebugStringA
WaitForSingleObject
ExpandEnvironmentStringsA
GetLastError
CloseHandle
GetCurrentProcess
LocalFree
HeapFree
HeapAlloc
GetProcessHeap
Process32Next
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetFileSize
DeleteFileA
user32
SendMessageTimeoutA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
gdi32
GetStockObject
advapi32
RegCreateKeyExA
GetTokenInformation
RegQueryValueExA
RegCloseKey
RegSetValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyExA
ConvertSidToStringSidA
EqualSid
wininet
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetSetOptionA
InternetSetCookieA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetReadFile
InternetCloseHandle
iphlpapi
GetAdaptersInfo
ole32
CoCreateGuid
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ