Static task
static1
Behavioral task
behavioral1
Sample
468a4c2e74e493198b572df574aa45271d9915b6bc84b64756eca97942445a90.dll
Resource
win7-20240221-en
General
-
Target
468a4c2e74e493198b572df574aa45271d9915b6bc84b64756eca97942445a90
-
Size
120KB
-
MD5
a365193132fcdb1a9bdabfbcd49fcf12
-
SHA1
b147067ce8d6972e711c2b22586d2dcd3050079e
-
SHA256
468a4c2e74e493198b572df574aa45271d9915b6bc84b64756eca97942445a90
-
SHA512
0a3897d742cb6dc61250cd1e2d29625cd384d6648855f3947ffec85de463cf15e83ff276a7e8b332374223396f9e135b21a9c6f5729a17b66899eeb12ac20e54
-
SSDEEP
1536:Ogkx/eKd1bPbtrrVhI+4nOtHb95LNgtD6BXzdJsDBkmCKP2:Oj/euBbhhW+46955SszdJsdnCK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 468a4c2e74e493198b572df574aa45271d9915b6bc84b64756eca97942445a90
Files
-
468a4c2e74e493198b572df574aa45271d9915b6bc84b64756eca97942445a90.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ