Static task
static1
Behavioral task
behavioral1
Sample
22204ae218b80ffd3971864c0264807bed0704485695ffd00832e593fb73117eN.dll
Resource
win7-20241010-en
General
-
Target
22204ae218b80ffd3971864c0264807bed0704485695ffd00832e593fb73117eN
-
Size
120KB
-
MD5
867dfa4e0a3ae2ee075e6fe2c0d2dfb0
-
SHA1
eb5a96db57e6573bf0d8e3f4ea16497a7c1968f3
-
SHA256
22204ae218b80ffd3971864c0264807bed0704485695ffd00832e593fb73117e
-
SHA512
42b57335372ff9acef5420c499a972d1716e48cc37fde0f005e19ec384ee982fdb8bb055840922b5f6ae1d79105ff6a839a74ddbab02fedd502b5c577b729d95
-
SSDEEP
3072:EULqrS26yqT6mSRC0MYn8DYj7fkaunHQNlVk:EOFF70/DpunHQz2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22204ae218b80ffd3971864c0264807bed0704485695ffd00832e593fb73117eN
Files
-
22204ae218b80ffd3971864c0264807bed0704485695ffd00832e593fb73117eN.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ