Static task
static1
Behavioral task
behavioral1
Sample
bef2db3a5a135b653625a2421a7f40a0N.dll
Resource
win7-20240705-en
General
-
Target
bef2db3a5a135b653625a2421a7f40a0N.exe
-
Size
133KB
-
MD5
bef2db3a5a135b653625a2421a7f40a0
-
SHA1
8cf345ef4b83e6c52f8f29d8699b4c61a1752783
-
SHA256
2632b3f210dc908668c7010cef2544cec552d0582f74224348ae0163e81c8da4
-
SHA512
e032627ffb90f87e98650024575c61d1822c50294bcc8af9e606eef7a78607a24f198546826da76c0bebd35e1ecce0f74562b4cca5b6954815b98092c149dd98
-
SSDEEP
1536:r0rowBgi9qABsb30TN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIA7hKRQZ8dtlxqT:ePK3q2lQBV+UdE+rECWp7hKU8dtlxq6+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bef2db3a5a135b653625a2421a7f40a0N.exe
Files
-
bef2db3a5a135b653625a2421a7f40a0N.exe.dll windows:5 windows x86 arch:x86
e62fa59ee142a56a462d1ecaafb77d17
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAddAtomW
InitializeCriticalSection
TlsAlloc
LocalFree
TlsGetValue
GetProcAddress
LoadLibraryW
GetCurrentThreadId
TlsSetValue
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
VirtualAlloc
VirtualQuery
TlsFree
VirtualFree
CloseHandle
Sleep
ResumeThread
GetThreadContext
SuspendThread
OpenThread
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetCurrentProcessId
FlushInstructionCache
VirtualProtectEx
GetCurrentProcess
GlobalDeleteAtom
GetSystemInfo
DeleteCriticalSection
user32
UnhookWindowsHookEx
CallNextHookEx
GetPropW
PostMessageW
SendMessageW
FillRect
SetWindowsHookExW
SetPropW
RemovePropW
GetSystemMetrics
gdi32
CreateSolidBrush
DeleteObject
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ