MSOUpdate
Static task
static1
Behavioral task
behavioral1
Sample
6687fd6f434c565df6fad94e532a1851.dll
Resource
win7-20240419-en
General
-
Target
6687fd6f434c565df6fad94e532a1851
-
Size
11KB
-
MD5
6687fd6f434c565df6fad94e532a1851
-
SHA1
e6c9a7caad603aeed21f94ef7654070d5c6a9955
-
SHA256
2f2300ae5a3da27d7e94a52d2afc54fac0da91278d7921dd60dd3e0afc2b7555
-
SHA512
8e0148be80f755a84baa9946cb2837f48dabc5769cd0696e48533986c915b3e1a799a2c8874eb572b789f73e72826a6927f72d662bf045e85494dbb533f54c6c
-
SSDEEP
192:EUBxvSu/lAnOx0qi6i18veWDWU4UeqLKGl78SfdE3UIPNyb:nvSu98Ox0hj8vrt4ZGlYsdE3UIPAb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6687fd6f434c565df6fad94e532a1851
Files
-
6687fd6f434c565df6fad94e532a1851.dll windows:4 windows x86 arch:x86
c4241be7825709325ceb2edf4ddcef5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WaitForSingleObject
CloseHandle
SetEvent
CreateThread
CreateEventA
GetLastError
CreateMutexA
DisableThreadLibraryCalls
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetTempPathA
GetEnvironmentVariableA
FreeLibrary
HeapFree
GetProcessHeap
GetProcAddress
Sleep
LoadLibraryA
WinExec
DeleteFileA
GetTempFileNameA
GetTickCount
ole32
CoInitialize
shlwapi
PathAppendA
msvcrt
_adjust_fdiv
memcpy
free
memset
malloc
strcat
strlen
fclose
fwrite
fread
fopen
atoi
strcpy
strtok
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
sprintf
rand
atol
srand
_initterm
wininet
InternetOpenA
InternetReadFile
HttpSendRequestA
HttpQueryInfoA
InternetCloseHandle
HttpOpenRequestA
InternetConnectA
ws2_32
htons
htonl
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 658B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ