log
Static task
static1
Behavioral task
behavioral1
Sample
313e933a420270dab9949ab126ae084282f5a354463d9aed53e184a495d2763a.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
313e933a420270dab9949ab126ae084282f5a354463d9aed53e184a495d2763a.dll
Resource
win10v2004-20240802-en
General
-
Target
313e933a420270dab9949ab126ae084282f5a354463d9aed53e184a495d2763a
-
Size
867KB
-
MD5
699dde080f95e0b1f89fa499338c0052
-
SHA1
d7d8a6b4eb8c54a2b64fb8aa68fd870bd55c98be
-
SHA256
313e933a420270dab9949ab126ae084282f5a354463d9aed53e184a495d2763a
-
SHA512
be858134c876f56dfb0801fa7098984edd545b364c0f730c5fb9b944f05e7d226e46ce80562626cd14d3fdd3753edd392cb9a84fef86f76b10729bf851a1b64f
-
SSDEEP
24576:8zGVJyi5u1wmn6mgmXlGPTk+3tlCnff4+:00cmu1dn1gmXlr+3c39
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 313e933a420270dab9949ab126ae084282f5a354463d9aed53e184a495d2763a
Files
-
313e933a420270dab9949ab126ae084282f5a354463d9aed53e184a495d2763a.dll windows:6 windows x86 arch:x86
a95d17b290cf686b690ac0a4b024f97d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WriteProcessMemory
user32
PeekMessageA
wininet
InternetGetCookieA
winhttp
WinHttpSetTimeouts
msvcrt
__CxxFrameHandler
ole32
CoInitialize
oleaut32
SafeArrayAccessData
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Exports
Exports
Sections
.text Size: 59KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 800KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ