COMPONENT.KEY
Static task
static1
Behavioral task
behavioral1
Sample
3b6b327ea0b25b0b379dd512a7426efca768729c38a43bee1992d6545a1bba40.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b6b327ea0b25b0b379dd512a7426efca768729c38a43bee1992d6545a1bba40.dll
Resource
win10v2004-20240709-en
General
-
Target
3b6b327ea0b25b0b379dd512a7426efca768729c38a43bee1992d6545a1bba40
-
Size
101KB
-
MD5
47d79b07a40f45eefc836646caee25af
-
SHA1
42ab047777af746e549a06e9c13d45afe6435bce
-
SHA256
3b6b327ea0b25b0b379dd512a7426efca768729c38a43bee1992d6545a1bba40
-
SHA512
76967872a41f9286cc9d389adf5eb223c8cad22cb00a0c7c102a26b684f2f140268106cf3f355d8a43e9e59735dc56878e2fc1ae7128e6ecadb7384269c25d8a
-
SSDEEP
1536:S8sQrD7fZFkQDTNJ1mK6xyLAe1+7756BuDC8j2Df4SZ3KGRJ/KCQIffVizv:oQrD7fZVTpeSAse5WZOy7F5RJqb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b6b327ea0b25b0b379dd512a7426efca768729c38a43bee1992d6545a1bba40
Files
-
3b6b327ea0b25b0b379dd512a7426efca768729c38a43bee1992d6545a1bba40.dll windows:1 windows x86 arch:x86
359e317a7cf6e9cef0175b00d5a2f976
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
advapi32
ReportEventA
RegisterEventSourceA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
DeregisterEventSource
kernel32
WriteFile
LoadLibraryA
HeapReAlloc
HeapFree
HeapAlloc
GetStdHandle
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
FindFirstFileA
FindClose
ExitProcess
DisableThreadLibraryCalls
user32
wvsprintfA
MessageBoxA
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jidata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jedata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.config Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ