Static task
static1
Behavioral task
behavioral1
Sample
63647d39b83ee74febb69a6d7b6bf6a674ac06bf947f39a21b3d927f2817aa46.dll
Resource
win7-20240319-en
General
-
Target
63647d39b83ee74febb69a6d7b6bf6a674ac06bf947f39a21b3d927f2817aa46
-
Size
120KB
-
MD5
72b2c6bafe5b13acd84ab79241a4a8bd
-
SHA1
97ee8820e536d9a483d62b63ec2b8c05f86276db
-
SHA256
63647d39b83ee74febb69a6d7b6bf6a674ac06bf947f39a21b3d927f2817aa46
-
SHA512
fe898cba39b9ffe83d82f0642d5b0ebb255980a0440b40919b4a72ce34f5eab3a4135cee7491f08fcd7c89fbd20658a5b399bf30ef1f0853ce241ee5294f7df9
-
SSDEEP
1536:/eN0sdQV0/SfQVei2FqWycnX5C5pM/y7nQzDUQjQiqxrA8dOXh:/eNRqV0/be9FvySXkN7nQzDUqEOR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63647d39b83ee74febb69a6d7b6bf6a674ac06bf947f39a21b3d927f2817aa46
Files
-
63647d39b83ee74febb69a6d7b6bf6a674ac06bf947f39a21b3d927f2817aa46.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ