Static task
static1
Behavioral task
behavioral1
Sample
17b1628917d7dc0525ad5fe6fdb9b5f7fff438ec8cfb46db508d2552666c9052N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17b1628917d7dc0525ad5fe6fdb9b5f7fff438ec8cfb46db508d2552666c9052N.dll
Resource
win10v2004-20240802-en
General
-
Target
17b1628917d7dc0525ad5fe6fdb9b5f7fff438ec8cfb46db508d2552666c9052N
-
Size
40KB
-
MD5
f0c7152851bf65d71bfcaccfc6b3b390
-
SHA1
4caf62370340a06c0c25a0880c8393d89efe562c
-
SHA256
17b1628917d7dc0525ad5fe6fdb9b5f7fff438ec8cfb46db508d2552666c9052
-
SHA512
31e4d00bee60338916c6a61abe69e4731b2a09b526b0699c10a9c740a2849fd1073a950ba32360c6098681f6bf07f128e929907c653d7a61611c7514bc555eb2
-
SSDEEP
768:VxyenjqPnoLBtpA+Z4hcdIaLJTblfKOQuVvsUs2S/:VxtGPoLrgcvLpblf5Pu/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17b1628917d7dc0525ad5fe6fdb9b5f7fff438ec8cfb46db508d2552666c9052N
Files
-
17b1628917d7dc0525ad5fe6fdb9b5f7fff438ec8cfb46db508d2552666c9052N.dll windows:4 windows x86 arch:x86
84145106324daa552b18c015b37cd6ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ord409
ord943
ord932
ord929
ord928
ord601
ord81
ord348
ord767
ord776
ord80
ord927
ord50
ord860
ord705
ord815
ord109
ord934
ord589
ord841
ord832
ord585
ord130
ord931
ord930
ord209
ord914
ord405
ord316
ord848
ord803
ord231
ord528
ord526
ord579
ord547
ord553
ord550
ord820
ord876
ord578
ord151
ord535
ord436
ord433
ord909
ord710
ord266
ord949
ord375
ord476
ord522
ord319
ord896
ord845
ord846
ord789
ord847
ord361
ord516
ord183
ord840
ord373
ord520
ord518
ord879
ord785
ord351
ord432
ord430
ord128
ord239
ord254
ord247
ord396
ord614
ord334
ord240
ord336
user32
ord729
wsock32
select
__WSAFDIsSet
ioctlsocket
recv
WSAGetLastError
socket
setsockopt
htons
htonl
connect
closesocket
send
inet_addr
gethostbyname
WSACleanup
WSAStartup
winmm
ord166
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ