MyStart
Static task
static1
Behavioral task
behavioral1
Sample
cc02727131f48f94263a50c0397e4020429537cf900074e7cc1f55fad8a4b756.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cc02727131f48f94263a50c0397e4020429537cf900074e7cc1f55fad8a4b756.dll
Resource
win10v2004-20240226-en
General
-
Target
cc02727131f48f94263a50c0397e4020429537cf900074e7cc1f55fad8a4b756
-
Size
32KB
-
MD5
3e15470b84bad97eb02dcb5940f2ce1f
-
SHA1
25192685d38c48a607d0672185a5138747765908
-
SHA256
cc02727131f48f94263a50c0397e4020429537cf900074e7cc1f55fad8a4b756
-
SHA512
96eb01cc7bfee5779df01b67207d34aa0e1562b9398e17c6299e6707b6cac82872e272fc423f3243f06e82237092206e1ed8d96dde28e270bcbab7dfc87ba988
-
SSDEEP
768:9Lx21pMwQD00RDYwP7oKMAKMApXny2cWxTY:9LxwpMjD04cwPcKpAA2c+T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc02727131f48f94263a50c0397e4020429537cf900074e7cc1f55fad8a4b756
Files
-
cc02727131f48f94263a50c0397e4020429537cf900074e7cc1f55fad8a4b756.dll windows:4 windows x86 arch:x86
5c7a6c233121d192737645c22dfffdf7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CopyFileA
GetProfileStringA
ExpandEnvironmentStringsA
Sleep
GetModuleFileNameA
ExitProcess
FindClose
FindNextFileA
FindFirstFileA
GetCurrentDirectoryA
SetFileTime
GetFileTime
GetSystemDirectoryA
MoveFileA
DuplicateHandle
OpenProcess
CreateEventA
GetProcAddress
LoadLibraryA
TerminateProcess
WriteFile
DisconnectNamedPipe
WriteProfileStringA
CreateProcessA
CreatePipe
Process32Next
Process32First
CreateToolhelp32Snapshot
PeekNamedPipe
SetFilePointer
WaitForSingleObject
GetCurrentProcessId
WaitForMultipleObjects
CreateFileA
GetFileSize
ReadFile
GetCurrentProcess
GetLastError
GetTempPathA
CloseHandle
EnterCriticalSection
LeaveCriticalSection
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
GetLocalTime
DeleteFileA
FreeLibrary
advapi32
RegSetValueExA
OpenEventLogA
GetOldestEventLogRecord
ReadEventLogA
CloseEventLog
RegOpenKeyExA
RegCloseKey
RegNotifyChangeKeyValue
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
ws2_32
WSAStartup
WSAGetLastError
setsockopt
send
select
recv
socket
inet_addr
htons
gethostbyname
closesocket
connect
shutdown
msvcrt
_beginthreadex
_fileno
_filelength
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
malloc
free
_iob
fgets
fseek
fclose
fwrite
sprintf
fopen
_vsnprintf
??3@YAXPAX@Z
_purecall
strncpy
strstr
__CxxFrameHandler
_CxxThrowException
??2@YAPAXI@Z
_strlwr
atoi
strrchr
localtime
_access
rand
srand
time
fread
ftell
iphlpapi
GetAdaptersInfo
Exports
Exports
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ