Static task
static1
Behavioral task
behavioral1
Sample
4125d61fb5db3094f8d3a2fec54a6650.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4125d61fb5db3094f8d3a2fec54a6650.dll
Resource
win10v2004-20240704-en
General
-
Target
4125d61fb5db3094f8d3a2fec54a6650.exe
-
Size
39KB
-
MD5
4125d61fb5db3094f8d3a2fec54a6650
-
SHA1
33dae2a89e3d1cf1b8a33d18b8f2a11c005857b8
-
SHA256
5e64d6abed8068207cf98ecfe2d3ad73f318a5fe23f9e191067914f8ccb17ebe
-
SHA512
9c48955968657ed70d399594aa96701f9721d6944b24f422825fae89f89f2bded151aca24dfd3ab048e056eb22fb8ae4f68589c99a4bab120e7fccf64ca0bcf0
-
SSDEEP
768:IoCpLG/h+IISCHUyOAYZyi0AFIXt4VpqUa39oPdljM4PbguMUEL8ehvJk+:IzXtQtXzZPbD5etS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4125d61fb5db3094f8d3a2fec54a6650.exe
Files
-
4125d61fb5db3094f8d3a2fec54a6650.exe.dll windows:1 windows x86 arch:x86
25cc0ecc96e0dd48a35f3e56a3f1c186
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
CreateFileW
DeleteFileW
FindResourceA
FreeResource
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
ReadFile
Sleep
WideCharToMultiByte
WriteFile
lstrcatA
lstrcatW
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpyW
lstrlenA
user32
EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA
comdlg32
GetOpenFileNameW
GetSaveFileNameA
ntdll
memcpy
memset
ws2_32
WSAStartup
WSACleanup
socket
closesocket
gethostbyname
connect
send
recv
WSASocketA
WSAConnect
WSASend
WSACreateEvent
WSAWaitForMultipleEvents
shlwapi
PathStripPathA
Sections
.code Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ