YB0H2410
Static task
static1
Behavioral task
behavioral1
Sample
f0b26b3bd4c8fcbaffd16d899e9289f945c66ee143ddbdee220fa7d1b771ca34.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
f0b26b3bd4c8fcbaffd16d899e9289f945c66ee143ddbdee220fa7d1b771ca34.dll
Resource
win10v2004-20240508-en
General
-
Target
f0b26b3bd4c8fcbaffd16d899e9289f945c66ee143ddbdee220fa7d1b771ca34
-
Size
24KB
-
MD5
78ac5beea65e890c0273502cc3cb4a94
-
SHA1
0c19b73224613e3503aa7a9282d15b9cde89a743
-
SHA256
f0b26b3bd4c8fcbaffd16d899e9289f945c66ee143ddbdee220fa7d1b771ca34
-
SHA512
f019325a07ab24a8622dbd14096844b52c33f0574119dfc3d37dbf4cf746d5a6e09a8a33cb241fe6a1f14e37bec018546b70b877b7a38494f275d2f5f08b0a57
-
SSDEEP
384:tLy6uVuiVuUTwuK33S0CPgd86vDGMUGSYjsrWsqkpD6:qwuM3S0Copv/YGsPl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0b26b3bd4c8fcbaffd16d899e9289f945c66ee143ddbdee220fa7d1b771ca34
Files
-
f0b26b3bd4c8fcbaffd16d899e9289f945c66ee143ddbdee220fa7d1b771ca34.dll windows:4 windows x86 arch:x86
7ee5082b92ca5394d5234c9054d63797
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
f3biprct
ord3
ord1
kernel32
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
DisableThreadLibraryCalls
WriteFile
HeapAlloc
HeapFree
LoadLibraryA
GetLastError
FlushFileBuffers
SetStdHandle
SetFilePointer
CloseHandle
Exports
Exports
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ