Wgpomsdeeomtunmdrt
Static task
static1
Behavioral task
behavioral1
Sample
CmmCaDtyjdickpenisbin.dll
Resource
win7-20230621-en
General
-
Target
CmmCaDtyjdickpenisbin.bin
-
Size
524KB
-
MD5
e8425731d24430d3eb25182dfc18200a
-
SHA1
a24bb1158c01117b14646e83243308396230e2a8
-
SHA256
b24c3ed00e59dbcff18037648cad503072b9e0d7a13f30d2bbfa9c466fdbee66
-
SHA512
f5779b0eb78b69459153557e65f549562de985103a43dad0d0ce8a2c2ca165b9cffae113a216793d95be173f9a285dc06cbdd32ff42f850e59eb20209b8804df
-
SSDEEP
6144:7KMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:79hXAg5aX0CL8fI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CmmCaDtyjdickpenisbin.bin
Files
-
CmmCaDtyjdickpenisbin.bin.dll windows x86
e9192d34e4c9dcdf739aaa1d74025eb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetProcessVersion
GetModuleFileNameW
CloseHandle
VirtualAllocEx
DeleteTimerQueue
InitAtomTable
msvcrt
wcscoll
setupapi
SetupDiOpenDeviceInterfaceW
wininet
InternetReadFile
rpcrt4
RpcMgmtSetCancelTimeout
NdrGetUserMarshalInfo
lz32
LZCopy
user32
BlockInput
TranslateMessage
FillRect
GetWindowTextA
DefMDIChildProcW
GetWindowContextHelpId
IsWinEventHookInstalled
GetClassNameA
ntdsapi
DsGetDomainControllerInfoW
iphlpapi
GetIpAddrTable
ws2_32
WSACleanup
inet_addr
imm32
ImmGetCandidateListW
advapi32
CreateRestrictedToken
CryptGenKey
CryptAcquireContextW
RegCloseKey
CryptContextAddRef
gdi32
GetViewportOrgEx
SetWindowOrgEx
pdh
PdhAddCounterW
ole32
CoCreateInstanceEx
CoGetObjectContext
StringFromGUID2
winmm
waveOutGetPitch
shlwapi
AssocGetPerceivedType
esent
JetInit
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 448KB - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ