Static task
static1
Behavioral task
behavioral1
Sample
103c77c73398946df7dd53a930737efec61565ba00466324b0fd2dca33696f78.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
103c77c73398946df7dd53a930737efec61565ba00466324b0fd2dca33696f78.dll
Resource
win10v2004-20230220-en
General
-
Target
103c77c73398946df7dd53a930737efec61565ba00466324b0fd2dca33696f78
-
Size
492KB
-
MD5
d3f674cf06eff1fda934929469c4a638
-
SHA1
c282eda07cb395a58f222880f59e1d1b3448dd31
-
SHA256
103c77c73398946df7dd53a930737efec61565ba00466324b0fd2dca33696f78
-
SHA512
16214f651c71ddf3996b260fdc0fa6ec60d2a281efe27cdb24c3d7886b1a14426096d0ba649e8310223fa9b7cef5393913a794b1f64edc48df9e9159e33fe3a9
-
SSDEEP
12288:mME23fPe+6ozAMqjPm5Aml7zQPdwrFLOMTKQIP:mMNW+0Mqrm5AmlfQPdwrUMTKQI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 103c77c73398946df7dd53a930737efec61565ba00466324b0fd2dca33696f78
Files
-
103c77c73398946df7dd53a930737efec61565ba00466324b0fd2dca33696f78.dll windows x86
7286ba50216c69a37eae6422826c4a4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
DrawDibClose
DrawDibOpen
avifil32
AVIStreamGetFrameClose
AVIFileExit
AVIStreamInfoA
AVIStreamSampleToTime
AVIStreamStart
AVIStreamLength
AVIStreamGetFrameOpen
AVIStreamOpenFromFileA
AVIStreamRelease
AVIStreamGetFrame
AVIFileInit
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
MulDiv
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
TerminateProcess
ExitProcess
GetACP
HeapSize
ExitThread
GetTimeZoneInformation
RaiseException
GetCommandLineA
RtlUnwind
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
SetErrorMode
GetCurrentThread
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SuspendThread
SetThreadPriority
ResumeThread
WaitForSingleObject
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
lstrcpynA
GetLastError
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
SetLastError
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalReAlloc
CreateEventA
GetProcAddress
ResetEvent
SetEvent
FreeLibrary
LoadLibraryA
lstrlenA
GlobalAlloc
lstrcpyA
GlobalUnlock
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GlobalSize
GlobalLock
GlobalFree
FindResourceA
LoadResource
LockResource
Sleep
CreateThread
CloseHandle
GetModuleFileNameA
OpenFile
GetTickCount
IsBadReadPtr
user32
LoadStringA
DestroyMenu
GetSysColorBrush
GetClassNameA
UnregisterClassA
PostQuitMessage
TranslateMessage
ValidateRect
CharUpperA
EndDialog
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetTopWindow
MessageBoxA
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
SetWindowLongA
EnumDisplaySettingsA
EqualRect
PtInRect
IntersectRect
SetCursor
GetCapture
SetCapture
GetCursorPos
GetMessageA
DispatchMessageA
ReleaseCapture
LoadCursorA
OemToCharA
CharToOemA
MsgWaitForMultipleObjects
PeekMessageA
DrawStateA
CopyRect
FrameRect
InflateRect
GetSysColor
DrawFocusRect
ClientToScreen
WindowFromPoint
GetActiveWindow
GetNextDlgTabItem
GetWindowLongA
GetKeyState
InvertRect
UnionRect
IsRectEmpty
wsprintfA
DestroyIcon
SendMessageA
SetRect
UpdateWindow
GetDC
ReleaseDC
EnableWindow
FillRect
KillTimer
InvalidateRect
SetTimer
IsWindow
GetClientRect
GetWindowRect
GetParent
OffsetRect
gdi32
MoveToEx
LineTo
Ellipse
PtVisible
RectVisible
ExtTextOutA
Escape
Rectangle
GetCurrentObject
RoundRect
Pie
Chord
Arc
Polygon
GetTextExtentPoint32A
GetPixel
CreateDIBitmap
PatBlt
SetBkColor
SetStretchBltMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
GetClipBox
CreateFontIndirectA
CreateBrushIndirect
CreateHatchBrush
CreatePatternBrush
StretchDIBits
CreateDIBSection
CreateSolidBrush
SetBkMode
TextOutA
GetDIBits
CreatePen
SetTextColor
GetStockObject
DeleteObject
StretchBlt
DeleteDC
GetDeviceCaps
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
CreateBitmap
GetObjectA
SetDIBitsToDevice
SetPixelV
comdlg32
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
shell32
ExtractIconExA
ExtractIconA
comctl32
ImageList_SetBkColor
ImageList_Draw
ImageList_Remove
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_AddMasked
_TrackMouseEvent
ImageList_Write
ImageList_Destroy
ImageList_Create
ImageList_Read
ImageList_GetImageCount
ord17
ImageList_Duplicate
ole32
OleUninitialize
OleInitialize
winmm
PlaySoundA
Sections
.text Size: 296KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 88KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE