Static task
static1
Behavioral task
behavioral1
Sample
58b0cd8e48f0a3b226f33aa51c0265000c6d029462539aefc58b0021a68c2f23.dll
Resource
win7-20230220-en
General
-
Target
58b0cd8e48f0a3b226f33aa51c0265000c6d029462539aefc58b0021a68c2f23.dll
-
Size
568KB
-
MD5
776d72affd6ee0a4f273cd87570f0e81
-
SHA1
c7ec1567c55d91ac0254dcea2ade2028ec21766f
-
SHA256
58b0cd8e48f0a3b226f33aa51c0265000c6d029462539aefc58b0021a68c2f23
-
SHA512
7815b0751aa4f13eaeef8990a06eb8f136756bb750289a85090b8c63c5dae97ed8ce3a04b412108a3e9e430de882472b9f313cdd610d3d241b5b4c1ff2a36998
-
SSDEEP
12288:iOmOcgmeiKm+wfCQG2DehQKARIg93WJv2j:iPOxFwfCutm+eU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58b0cd8e48f0a3b226f33aa51c0265000c6d029462539aefc58b0021a68c2f23.dll
Files
-
58b0cd8e48f0a3b226f33aa51c0265000c6d029462539aefc58b0021a68c2f23.dll.dll windows x86
ac33d285839de1ea9fd6256ae9a855bd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveInOpen
ws2_32
closesocket
iphlpapi
GetUdpStatistics
oleaut32
LoadTypeLibEx
SafeArrayCreateVector
user32
GetWindowTextA
CheckRadioButton
GetAncestor
SwitchDesktop
advapi32
OpenServiceA
PrivilegedServiceAuditAlarmA
AllocateLocallyUniqueId
RegOpenKeyA
CreatePrivateObjectSecurity
wininet
CommitUrlCacheEntryW
msvcrt
memset
mscms
CloseColorProfile
kernel32
LockFileEx
EraseTape
InitializeCriticalSectionAndSpinCount
GetModuleFileNameA
LoadLibraryExW
SetConsoleTextAttribute
SetMailslotInfo
GetBinaryTypeA
FindResourceExW
OutputDebugStringA
TryEnterCriticalSection
GetVersionExA
GetTimeFormatA
WaitForSingleObjectEx
WriteProcessMemory
SetFileApisToOEM
gdi32
SetDCBrushColor
SetDIBColorTable
GetFontUnicodeRanges
setupapi
CM_Enable_DevNode
crypt32
CryptFreeOIDFunctionAddress
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 408KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ