Start
Static task
static1
Behavioral task
behavioral1
Sample
bf79498c1af3c01394ea1b5db094303748d14cedacd15d195c6ee456659b5656.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bf79498c1af3c01394ea1b5db094303748d14cedacd15d195c6ee456659b5656.dll
Resource
win10v2004-20240802-en
General
-
Target
bf79498c1af3c01394ea1b5db094303748d14cedacd15d195c6ee456659b5656
-
Size
360KB
-
MD5
8b224e4d3d01368bd9cb394661238a7d
-
SHA1
186200f91c317ed49c3c7ac93ffc46faacfbde1b
-
SHA256
bf79498c1af3c01394ea1b5db094303748d14cedacd15d195c6ee456659b5656
-
SHA512
f16d9c8a6f9c9ba14916c0477acdc42a86675e03fc0aba6e57ddc1d3a1a88bc0e6f95e9a14c08c78c52636e95056778538d5b1ec09e149889031c306e220edb8
-
SSDEEP
768:YWNM7hEHQgvY8TpuRtyKX/70yIjFRJaeP/saMsj84bxpHtRlP6aMVa:YWuEbA8TctyKXwBdaksT/4bLHvlX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf79498c1af3c01394ea1b5db094303748d14cedacd15d195c6ee456659b5656
Files
-
bf79498c1af3c01394ea1b5db094303748d14cedacd15d195c6ee456659b5656.dll windows:4 windows x86 arch:x86
b07168a7aef953f1dabc4978b4dc1709
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemDirectoryW
lstrcatW
lstrlenA
lstrlenW
GetLastError
GetVersion
GetProcessHeap
HeapAlloc
HeapFree
LoadLibraryA
GetModuleFileNameW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetStdHandle
GetFileType
RtlUnwind
GetCommandLineA
CloseHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
advapi32
ChangeServiceConfig2A
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegSetValueExA
OpenSCManagerA
CloseServiceHandle
CreateServiceW
Exports
Exports
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.shell Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ