Static task
static1
Behavioral task
behavioral1
Sample
cd2a0bf2e6d8a2e3ac22048e11deb260N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cd2a0bf2e6d8a2e3ac22048e11deb260N.dll
Resource
win10v2004-20240802-en
General
-
Target
cd2a0bf2e6d8a2e3ac22048e11deb260N.exe
-
Size
12KB
-
MD5
cd2a0bf2e6d8a2e3ac22048e11deb260
-
SHA1
71ea87267f376a7edcc2e5991865e2cffb08ea48
-
SHA256
6e55c1dfa12f1ad32efa44eefed0d2c063b1a09de62de84abb2854bee747a970
-
SHA512
741d69a896fa64abdb3d8dc7273f7f363207d4ab19bbeb3489b15ba8a068594a596bf5c8e5c6e1d7f777139c4d758434c49dde6479ac04304b681fe5bdc43c21
-
SSDEEP
96:IoFS2Cv2QwYjTW2zb5vav1Q9jEKNtGS5TN51pUHaveajil+8HxSbNTWq+XpFm0S1:lFtyLTNv5vae9jEcUHNaOJ4Zz0Jg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd2a0bf2e6d8a2e3ac22048e11deb260N.exe
Files
-
cd2a0bf2e6d8a2e3ac22048e11deb260N.exe.dll windows:4 windows x86 arch:x86
726f43d278c57146f314690bd2457c03
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsBadCodePtr
LoadLibraryA
FreeLibrary
VirtualProtect
msvcrt
malloc
free
strncpy
strstr
_snprintf
ws2_32
inet_ntoa
gethostbyname
gethostname
WSAStartup
send
WSACleanup
Sections
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ