Static task
static1
Behavioral task
behavioral1
Sample
ginumtue.dll
Resource
win7-20230220-en
General
-
Target
ginumtue.fpi
-
Size
220KB
-
MD5
9627a223cebc074cefb834370cba058a
-
SHA1
73c470ad9203150629b13d7f077000aa4f335f26
-
SHA256
8291f9579288153e0a1812c6c528563634c5c41b0916c606f7d8b4544ccc381a
-
SHA512
283b341fa4bc999dd32586f8914adad9c51ee9533a35fb2c30c165c11f9e4d843062252651bf103183c11cb8ba66d1118df31558f7c59b881f85a2507148ff5a
-
SSDEEP
1536:iYrO9JaI9HwxtB3wjCaNhQ8yl6sUdM8FOIUa:2HJ9HQv3wFNh6U6pIUa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ginumtue.fpi
Files
-
ginumtue.fpi.dll windows x86
373b799879b5962a9ab876f5f95697cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetRandomRgn
AddFontResourceW
GetTextExtentExPointI
UnrealizeObject
CreateEnhMetaFileW
comctl32
ImageList_GetIcon
powrprof
ReadGlobalPwrPolicy
winmm
mixerSetControlDetails
msvcrt
fgets
memset
mprapi
MprAdminMIBServerConnect
setupapi
CM_Get_DevNode_Registry_PropertyA
SetupQuerySourceListW
CM_Get_Device_Interface_List_Size_ExW
CM_Add_Res_Des
CM_Get_Child
urlmon
IsValidURL
avifil32
AVIStreamInfoW
oleaut32
VarDecFromI4
user32
SwitchDesktop
GetUpdateRgn
GetClipboardOwner
RemoveMenu
AnyPopup
SetKeyboardState
PostThreadMessageW
LoadStringA
MessageBoxW
IsZoomed
IsClipboardFormatAvailable
crypt32
CryptEnumOIDInfo
CryptMsgGetAndVerifySigner
CertEnumPhysicalStore
ole32
MkParseDisplayName
msacm32
acmFormatChooseW
kernel32
GetModuleHandleW
GetModuleFileNameW
GetBinaryTypeW
LocalReAlloc
GetSystemTimeAsFileTime
GetPriorityClass
GetAtomNameA
GlobalFree
GetCPInfo
GetProfileSectionW
TlsFree
GetUserDefaultLCID
EnterCriticalSection
GetModuleHandleA
winscard
SCardSetCardTypeProviderNameW
mscms
AssociateColorProfileWithDeviceW
advapi32
QueryServiceStatus
RegNotifyChangeKeyValue
Sections
.text Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ