Static task
static1
Behavioral task
behavioral1
Sample
0f00c8797fa1f7f45152d1c191c9f15aa9a835a2359dccd5fcbf86521feb3bd5.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f00c8797fa1f7f45152d1c191c9f15aa9a835a2359dccd5fcbf86521feb3bd5.dll
Resource
win10v2004-20240802-en
General
-
Target
0f00c8797fa1f7f45152d1c191c9f15aa9a835a2359dccd5fcbf86521feb3bd5
-
Size
31KB
-
MD5
e0233d52f2cbd378a102199a90bde0ff
-
SHA1
8514f2cc612c744645fefbbcc7f2377db7eac9cc
-
SHA256
0f00c8797fa1f7f45152d1c191c9f15aa9a835a2359dccd5fcbf86521feb3bd5
-
SHA512
fa45be9dd0df93b2646acb3bc14974b5684d4c1becba96ea4e99b636ae4ce66b75ba9d2a7f08838eced29c81b9de83bb4d398ac6ad32ddef8c672a878e3885d5
-
SSDEEP
768:+6Rh0XFMlkjudxcuL4uiJWdVjoPidZtDZxNBIx:+6r9MLPintDZlW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f00c8797fa1f7f45152d1c191c9f15aa9a835a2359dccd5fcbf86521feb3bd5
Files
-
0f00c8797fa1f7f45152d1c191c9f15aa9a835a2359dccd5fcbf86521feb3bd5.dll windows:1 windows x86 arch:x86
25cc0ecc96e0dd48a35f3e56a3f1c186
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
CreateFileW
DeleteFileW
FindResourceA
FreeResource
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
ReadFile
Sleep
WideCharToMultiByte
WriteFile
lstrcatA
lstrcatW
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpyW
lstrlenA
user32
EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA
comdlg32
GetOpenFileNameW
GetSaveFileNameA
ntdll
memcpy
memset
ws2_32
WSAStartup
WSACleanup
socket
closesocket
gethostbyname
connect
send
recv
WSASocketA
WSAConnect
WSASend
WSACreateEvent
WSAWaitForMultipleEvents
shlwapi
PathStripPathA
Sections
.code Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ