Fix_Info
Static task
static1
Behavioral task
behavioral1
Sample
2397a3d6821dbadd9656491770c64e22725c6f1e2c7442c144c656e45e565c17.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2397a3d6821dbadd9656491770c64e22725c6f1e2c7442c144c656e45e565c17.dll
Resource
win10v2004-20240226-en
General
-
Target
2397a3d6821dbadd9656491770c64e22725c6f1e2c7442c144c656e45e565c17
-
Size
6.7MB
-
MD5
70be55fef31c7c0b96f7c1a45669ec0d
-
SHA1
286a2defbfc795b4f2388d531c8ceb268ac4ae4b
-
SHA256
2397a3d6821dbadd9656491770c64e22725c6f1e2c7442c144c656e45e565c17
-
SHA512
06f610c7d210cf2f4bbd2473522e7be7c5a89553eaa543f83aff37cc7b16d3d95bf878cc2b8cefee08065bad077261ebec461d9fbfc4889bf5bbd941ec3741ce
-
SSDEEP
196608:G8RZyIzCdZgK5BDOoQ4mUyxw/3BF0kfvjCur:G83ymCPgCByvKzBvGi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2397a3d6821dbadd9656491770c64e22725c6f1e2c7442c144c656e45e565c17
Files
-
2397a3d6821dbadd9656491770c64e22725c6f1e2c7442c144c656e45e565c17.dll windows:5 windows x86 arch:x86
579c09125b3595d14cd235ecd7c7563f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapSize
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperA
CharUpperBuffW
advapi32
RegSetValueExA
shlwapi
StrPBrkA
ws2_32
socket
iphlpapi
GetAdaptersInfo
Exports
Exports
Sections
.text Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.v^u Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
., j Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.@`1 Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ