RunDLL
Static task
static1
Behavioral task
behavioral1
Sample
v07p.dll
Resource
win7-20240903-en
General
-
Target
6120e4378e265b388b1ea5f32b8ed6e504f44dcb491a3cdbae4ee8088d031d10
-
Size
148KB
-
MD5
b367ec0ec24e11327ce4c6c03f67cc3b
-
SHA1
a2e40159b8f3aec6220bac2f31f378af745c41f7
-
SHA256
6120e4378e265b388b1ea5f32b8ed6e504f44dcb491a3cdbae4ee8088d031d10
-
SHA512
3316759198472a170e968f63313da79cfebdfbef029d41aac92a6e62b340708ecaa8413067ce604c225b45e8dfc32c722d55b59dff0ad1e2e98c9bfa5d77fa66
-
SSDEEP
3072:gXzH3Y3Zp6uu6xBRenw0y2Xm4eOZbbF/aosNsMvs0u7tTcIW+aucXLo:gXj32ZpVxxBkJyypl/aosNhmtTFW+auB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/v07p.bin
Files
-
6120e4378e265b388b1ea5f32b8ed6e504f44dcb491a3cdbae4ee8088d031d10.zip
Password: infected
-
v07p.bin.dll windows:5 windows x86 arch:x86
a34412fd2050ec02d92ed7745b98eaa2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAllocExNuma
GetCurrentProcess
LoadLibraryA
GetProcAddress
WriteFileGather
VirtualAlloc
VirtualQuery
VirtualFree
SetLastError
VirtualProtect
IsBadReadPtr
FreeLibrary
GetNativeSystemInfo
HeapAlloc
GetProcessHeap
HeapFree
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
HeapSize
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
RaiseException
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
user32
MessageBoxA
SystemParametersInfoW
OffsetRect
GetAsyncKeyState
GetCursorPos
GetWindowRect
Exports
Exports
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ