Compliance
Static task
static1
Behavioral task
behavioral1
Sample
bc16ac856e75f2352d2fbc9c19e37ee0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bc16ac856e75f2352d2fbc9c19e37ee0N.dll
Resource
win10v2004-20240802-en
General
-
Target
bc16ac856e75f2352d2fbc9c19e37ee0N.exe
-
Size
179KB
-
MD5
bc16ac856e75f2352d2fbc9c19e37ee0
-
SHA1
3aa99829a336b0433e4fc76d7edcf148673069ce
-
SHA256
72486058c97451d66ce17228ed114f609fc4c3a58dca3ac516d6a849ca8c62be
-
SHA512
9caebb6a44840bbed5e2c9fbe28e2bfe68c9de108dae3373d5632c4c8cb7f7031807e3da7e00e536a4277ed99d6c4616db07f843eeaf2dd41e641a74ae3047b7
-
SSDEEP
3072:EC5Wpfs98nVCWdKycHtld8VBt7NUalwXH9RqYzJabTYd3KIdj6+uFdi98pvO0hfd:ECOfQ8nVcycHrd8VBtBUa4HfRzJabT88
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc16ac856e75f2352d2fbc9c19e37ee0N.exe
Files
-
bc16ac856e75f2352d2fbc9c19e37ee0N.exe.dll windows:4 windows x86 arch:x86
28afa3e869e6149039d25c05abfd3e22
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mfc42
ord825
msvcrt
rand
user32
GetDesktopWindow
advapi32
QueryServiceStatus
ws2_32
inet_addr
shlwapi
PathIsDirectoryA
ntdll
NtQueryInformationFile
psapi
GetModuleFileNameExA
ole32
CoInitializeSecurity
oleaut32
SafeArrayGetVartype
msvcp60
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
netapi32
Netbios
Exports
Exports
Sections
.text Size: 173KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pkls Size: 512B - Virtual size: 520B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE