_Start@12
Static task
static1
Behavioral task
behavioral1
Sample
d7524a39361dece117446308649f6c0e4c42b7a7dc6f61334a0cdf25fc25d178.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7524a39361dece117446308649f6c0e4c42b7a7dc6f61334a0cdf25fc25d178.dll
Resource
win10v2004-20240226-en
General
-
Target
d7524a39361dece117446308649f6c0e4c42b7a7dc6f61334a0cdf25fc25d178
-
Size
32KB
-
MD5
781c8463fe39457c77fbb43b21ed5e52
-
SHA1
73a9ad3e3fafcf5c44716a07792a5e6b61416953
-
SHA256
d7524a39361dece117446308649f6c0e4c42b7a7dc6f61334a0cdf25fc25d178
-
SHA512
af01821d51e29e1636fb31cfddea230d74af739aff3eba33b5bec65ed7da982fdfd69ed9384d87c00a03910f5dd201221330f1b6015d0f170125841b2d3ad5a8
-
SSDEEP
768:2Wg9BkeMzCM6CoEJd2Fw0I+Y5p5PEvOaMMXA7jvnJwK5:2LVM/oed2Fw0Ib5p5PEvOaDXy+K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7524a39361dece117446308649f6c0e4c42b7a7dc6f61334a0cdf25fc25d178
Files
-
d7524a39361dece117446308649f6c0e4c42b7a7dc6f61334a0cdf25fc25d178.dll windows:4 windows x86 arch:x86
d0376bd46ee8ea10f21c3e86719629f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Process32First
CreateToolhelp32Snapshot
FileTimeToSystemTime
SystemTimeToFileTime
GetLocalTime
DeleteFileA
GetTempPathA
GetLastError
Sleep
OpenProcess
WaitForSingleObject
CreateProcessA
CreateFileA
ExpandEnvironmentStringsA
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
WinExec
Process32Next
CloseHandle
GetModuleFileNameA
GetFileSize
OutputDebugStringA
user32
CallNextHookEx
advapi32
OpenProcessToken
GetUserNameA
RevertToSelf
ImpersonateLoggedOnUser
mfc42
ord4204
ord825
ord823
ord540
ord800
ord5572
ord2915
ord535
ord2818
ord941
ord5442
ord3318
ord665
ord6385
ord1979
ord5186
ord354
ord537
ord860
ord858
ord940
ord6874
msvcrt
getc
rewind
fwrite
ftell
fseek
fread
fclose
fopen
_vsnprintf
_beginthreadex
_strupr
rand
rename
putc
sprintf
printf
strrchr
_strlwr
srand
time
_itoa
free
malloc
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_CxxThrowException
__CxxFrameHandler
fflush
_iob
wininet
InternetSetCookieA
InternetTimeFromSystemTime
ws2_32
WSAStartup
iphlpapi
GetAdaptersInfo
msvcp60
??0Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
userenv
LoadUserProfileA
UnloadUserProfile
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SharedSe Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ