Static task
static1
Behavioral task
behavioral1
Sample
a675c514af206517ffb2e3943cc7289d14c3df0d100977b01f5a3be591f9ffd1.dll
Resource
win7-20240221-en
General
-
Target
a675c514af206517ffb2e3943cc7289d14c3df0d100977b01f5a3be591f9ffd1
-
Size
120KB
-
MD5
d84401ad8e341d8e75a86cc80cdfaa7d
-
SHA1
c3a24e62dd5e72d4ea8ad657df74a145abe8cc91
-
SHA256
a675c514af206517ffb2e3943cc7289d14c3df0d100977b01f5a3be591f9ffd1
-
SHA512
fc3776231392a43156b0cf84a4dd4798786feb328b9ef4fc8069214c56e9608a77ba22431ea22c94a2c0eb664de19396fe3553d497c8f0ca5ee69bcc80ca45e9
-
SSDEEP
3072:uKTu747mBscgnf8DaufSsD0NA/R4kUaRWz/FW:hWEl3AaWwNRks/o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a675c514af206517ffb2e3943cc7289d14c3df0d100977b01f5a3be591f9ffd1
Files
-
a675c514af206517ffb2e3943cc7289d14c3df0d100977b01f5a3be591f9ffd1.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ