Static task
static1
Behavioral task
behavioral1
Sample
d7e3d682c681c313e303fb55d83ce81302b3f787771dbd4e6562f2aa3be56658.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
d7e3d682c681c313e303fb55d83ce81302b3f787771dbd4e6562f2aa3be56658.dll
Resource
win10v2004-20240508-en
General
-
Target
d7e3d682c681c313e303fb55d83ce81302b3f787771dbd4e6562f2aa3be56658
-
Size
5.9MB
-
MD5
d6f86ef548c59108b5b811fbfe0f0d91
-
SHA1
3c302ee237011cb9c6a4359bf06f261152a9e654
-
SHA256
d7e3d682c681c313e303fb55d83ce81302b3f787771dbd4e6562f2aa3be56658
-
SHA512
d94e6a15b10ffd441a74ca17df6cb478c7f106c1a1134d37e0b99b913131ad2769ee584d536aed484f89ba559c67512be3f340bc3e5640982308295d3db8a00a
-
SSDEEP
98304:+G/VOHFn/EC0WMUmdHVwlMw83vGd/j/u4waC8E+lYgKSRn3xUjxe23S:+UcFnMCVmjoM//kj/u4waC8hrUE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7e3d682c681c313e303fb55d83ce81302b3f787771dbd4e6562f2aa3be56658
Files
-
d7e3d682c681c313e303fb55d83ce81302b3f787771dbd4e6562f2aa3be56658.dll windows:6 windows x86 arch:x86
9347818c5d66d0a174afaf4402f21c2a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
connect
kernel32
WriteConsoleW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
FindWindowA
CharUpperBuffW
advapi32
RegCloseKey
ole32
CreateStreamOnHGlobal
Sections
.text Size: - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pKY Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.\eT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.W?~ Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ