Static task
static1
Behavioral task
behavioral1
Sample
10ff67e3d7e4067dca037dd1b445bc3b70c496211c624fcd465bdd28bb60cb47.dll
Resource
win7-20241010-en
General
-
Target
10ff67e3d7e4067dca037dd1b445bc3b70c496211c624fcd465bdd28bb60cb47
-
Size
120KB
-
MD5
dc451d7a8337c21289b421bacb4cd459
-
SHA1
09e70b0db9e784e496fff478bc75f85579a6777d
-
SHA256
10ff67e3d7e4067dca037dd1b445bc3b70c496211c624fcd465bdd28bb60cb47
-
SHA512
ad1ee21b080e59c24d1bd37a12277ea4bc8510888664efaea858fe0ea435e1fe75f41f4e8e391e91c33948303eb68e31ab3ced2f08c7b5d371da25b45bad084b
-
SSDEEP
3072:9n89JQT5RvnClNAlTfzZVgWKcccZXhRc9J6/2+:9SJQ3nCXAJfNVx5g9q2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10ff67e3d7e4067dca037dd1b445bc3b70c496211c624fcd465bdd28bb60cb47
Files
-
10ff67e3d7e4067dca037dd1b445bc3b70c496211c624fcd465bdd28bb60cb47.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ