GetPassword
Static task
static1
Behavioral task
behavioral1
Sample
0c9ae22ce1a7d5d9fb3f00adf732f1ab45aaba5742f678a35db2d342c3cc349b.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0c9ae22ce1a7d5d9fb3f00adf732f1ab45aaba5742f678a35db2d342c3cc349b.dll
Resource
win10v2004-20230220-en
General
-
Target
0c9ae22ce1a7d5d9fb3f00adf732f1ab45aaba5742f678a35db2d342c3cc349b
-
Size
208KB
-
MD5
8683eb3e6cd9dbd1e9bc49eb47a19858
-
SHA1
d88faab788c881de7e2dfa8b0326e078d59c9e46
-
SHA256
0c9ae22ce1a7d5d9fb3f00adf732f1ab45aaba5742f678a35db2d342c3cc349b
-
SHA512
30cccdbc3d715edddcf9455a89f8fe5a48f9050fcfa3b0d662efc61c081d743ad419085c80de4353eecffed63d2b65ebecc6ada2a4303ba62dcf4b28c1d2a505
-
SSDEEP
1536:VsBg3YZeJRh7v+lXWZp9dbOnFsEEuKop21MbcPw7AzRduhJJjezAePkrTy9oA8cR:mkYZeDhr+lXWDREpCQTSoA8LgL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c9ae22ce1a7d5d9fb3f00adf732f1ab45aaba5742f678a35db2d342c3cc349b
Files
-
0c9ae22ce1a7d5d9fb3f00adf732f1ab45aaba5742f678a35db2d342c3cc349b.dll windows x86
789d28661ee1caba469be6b348ee22d2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetTickCount
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
CloseHandle
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
FlushFileBuffers
Sleep
SetStdHandle
RtlUnwind
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
IsBadWritePtr
IsBadReadPtr
HeapValidate
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
SetConsoleCtrlHandler
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
UnhandledExceptionFilter
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetFilePointer
SetEnvironmentVariableA
user32
SendMessageA
CreateDialogParamA
ShowWindow
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DestroyWindow
GetDlgItem
GetWindowTextA
SetFocus
MessageBoxA
SetWindowTextA
EndDialog
Exports
Exports
Sections
.text Size: 160KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ