dd7b140527c19a4d7dd199e2fbb504047f2ce5a1b33b98b6d9ec1e28e2b778c8
- SHA256 dd7b140527c19a4d7dd199e2fbb504047f2ce5a1b33b98b6d9ec1e28e2b778c8
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9594577308c87de7eabcf43d26efc638a2047f2e78985e7dde17287317d4cfaf.dll
Resource
win7-20240729-en
windows7-x64
6 signatures
150 seconds
General
- Target dd7b140527c19a4d7dd199e2fbb504047f2ce5a1b33b98b6d9ec1e28e2b778c8
- Size 423KB
- Sample240830-3d7deascme
- SHA256 dd7b140527c19a4d7dd199e2fbb504047f2ce5a1b33b98b6d9ec1e28e2b778c8
- MD5 616997b60ae9289f6a4aec9aa2708ed0
- SHA1 f5cc6935bb4d813eafd463b4abcb29ee390a5ae4
- SHA512 e5fc83db44978d996b57285a8913d69e0135741be0b3a412d12b0b7f652a98cb847325067912f326ccd8199100d2f4fa12a4bb19bf6d7fcc26cabe95329d7108
- SSDEEP 12288:G78u3oEdurrIIPuzRCqNzVffcEwDcoBh8e:G78uYEcXvPqNl0Db
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9594577308c87de7eabcf43d26efc638a2047f2e78985e7dde17287317d4cfaf
File Explorer
-
dd7b140527c19a4d7dd199e2fbb504047f2ce5a1b33b98b6d9ec1e28e2b778c8.zip 423KB
-
9594577308c87de7eabcf43d26efc638a2047f2e78985e7dde17287317d4cfaf.dll 664KB
9594577308c87de7eabcf43d26efc638a2047f2e78985e7dde17287317d4cfaf
- IMPHASH 575d942b23dfcc476865145b0dd6ee57
- SHA256 9594577308c87de7eabcf43d26efc638a2047f2e78985e7dde17287317d4cfaf
- MD5 22cdafaa93390d4fe9b9e1a4d87267a4
- SHA1 5a4e352b18bdbe9c94f45417d8796d64442e6413
- SHA512 62bac44c033ab6d0263bc3ae55587daf7e7e242885ce5c78bd49a578acd2a3a2004641da603793a07f2443dfc5981c3b6b4ba0f7c3ee8db4824b0eb3237fc9f1
- SSDEEP 12288:X/0Qzqf0efi48bM+6TFKywVt6PbEYU0eyJTT/Mu9oV01u7oaEPj:P0zhfkn6TFKywvCbEOxDMu9oy9aEPj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
119221
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\32\Space-Occur\348\Liquid\like.pdb
kernel32
FlushFileBuffers
LocalFree
LocalAlloc
CreateDirectoryW
CopyFileW
ResetEvent
VirtualAlloc
VirtualFree
VirtualProtect
GetCurrentDirectoryW
GetModuleFileNameW
GetEnvironmentVariableW
CreateSemaphoreW
SetConsoleOutputCP
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoW
HeapSize
SetEndOfFile
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
InterlockedExchange
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
RtlUnwind
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
Sleep
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
MultiByteToWideChar
ReadFile
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
HeapReAlloc
CreateFileA
SetConsoleCtrlHandler
FreeLibrary
SetEnvironmentVariableA
user32
SetParent
IntersectRect
EndDeferWindowPos
ExitWindowsEx
InflateRect
psapi
EnumProcesses
EmptyWorkingSet
EnumProcessModules
EnumDeviceDrivers
GetModuleInformation
GetMappedFileNameW
GetDeviceDriverFileNameW
GetPerformanceInfo
GetModuleFileNameExW
GetModuleBaseNameW
GetDeviceDriverBaseNameW
EnumPageFilesW
Countrywrong
SellHole
Thin
Name
.text
Size
228KB
Virtual Size
224KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
360KB
Virtual Size
359KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
56KB
Virtual Size
655KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=126, version=50327,
count=21, id=125, productName=VS2005 build 50727, version=50727,
count=128, id=109, productName=VS2005 build 50727, version=50727,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=176, id=1, productName=Unmarked objects,
count=76, id=111, version=50727,
count=1, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=1, id=121, version=50727,