Static task
static1
Behavioral task
behavioral1
Sample
22417be149a55fcde224794d577b8b647148ba7ae89760fe539fa9e0392ccde6.dll
Resource
win7-20241010-en
General
-
Target
22417be149a55fcde224794d577b8b647148ba7ae89760fe539fa9e0392ccde6
-
Size
120KB
-
MD5
7f8fd1071e6c1af6cf86a2156a5314c2
-
SHA1
56122bc9d8a1f7f2d8d303f634674d43bc61e8ba
-
SHA256
22417be149a55fcde224794d577b8b647148ba7ae89760fe539fa9e0392ccde6
-
SHA512
a75b29656361a1497591a8e723159c7d3e116a33165c5ce312f34e36884fecee66b88ebbe6baca13c04d81c38d18ce894cad16867814f7cf5fbf4f4d5e2bcced
-
SSDEEP
3072:E/f+UVOm82Z6MvQA7tlk7Aw5F9jxQeHy:UZRdnQQyAgHS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22417be149a55fcde224794d577b8b647148ba7ae89760fe539fa9e0392ccde6
Files
-
22417be149a55fcde224794d577b8b647148ba7ae89760fe539fa9e0392ccde6.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ