Start
Static task
static1
Behavioral task
behavioral1
Sample
72af3cc0a1d287849c9681daf9a8a21cbb4368b4b7fcdd7fb0023a790d42263d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
72af3cc0a1d287849c9681daf9a8a21cbb4368b4b7fcdd7fb0023a790d42263d.dll
Resource
win10v2004-20231215-en
General
-
Target
72af3cc0a1d287849c9681daf9a8a21cbb4368b4b7fcdd7fb0023a790d42263d
-
Size
15KB
-
MD5
ebce7a535cf4b4a0025fa181db95da52
-
SHA1
36672128d79c893ff0561a180690cb9c46c2b02b
-
SHA256
72af3cc0a1d287849c9681daf9a8a21cbb4368b4b7fcdd7fb0023a790d42263d
-
SHA512
643a0b1baf61e20e6ddcc5bd214f729b2253ae0441528ccead3aacc83f47c1191bf234d6f1b98b8cebe4a80829ebcd8b797132a5d823fcf69d29f8409cb033a3
-
SSDEEP
384:z41sT6qMe/PRsLVPjl+cANiQguM+TruQMzbWiytyp7:z41uzKLAcANPgQP0Ciuq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72af3cc0a1d287849c9681daf9a8a21cbb4368b4b7fcdd7fb0023a790d42263d
Files
-
72af3cc0a1d287849c9681daf9a8a21cbb4368b4b7fcdd7fb0023a790d42263d.dll windows:4 windows x86 arch:x86
14d592d9b62a19f75e557016a0de64ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42
ord940
ord6874
ord535
ord922
ord926
ord924
ord354
ord5186
ord1979
ord6385
ord3318
ord5442
ord665
ord939
ord823
ord860
ord2818
ord540
ord858
ord537
ord800
ord825
ord4204
msvcrt
_adjust_fdiv
_initterm
malloc
free
_mbscmp
sprintf
strrchr
__CxxFrameHandler
time
srand
rand
_beginthreadex
strstr
_strlwr
kernel32
GetModuleFileNameA
GetTickCount
ExpandEnvironmentStringsA
CloseHandle
DeleteFileA
ReadFile
ExitProcess
GetFileSize
GetLastError
CreateProcessA
WinExec
CreateFileA
OutputDebugStringA
SetFilePointer
WaitForSingleObject
Sleep
user32
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
DispatchMessageA
RegisterClassA
LoadCursorA
LoadIconA
DefWindowProcA
PostQuitMessage
CreateWindowExA
gdi32
GetStockObject
wininet
InternetReadFile
InternetSetCookieA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
iphlpapi
GetAdaptersInfo
ole32
CoCreateGuid
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ