Static task
static1
Behavioral task
behavioral1
Sample
96c31c5c17cdefe7535a506f8ee4e1b874cbf57ebea6da3d7314f6ea96f22246.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
96c31c5c17cdefe7535a506f8ee4e1b874cbf57ebea6da3d7314f6ea96f22246.dll
Resource
win10-20230703-en
General
-
Target
96c31c5c17cdefe7535a506f8ee4e1b874cbf57ebea6da3d7314f6ea96f22246
-
Size
1.2MB
-
MD5
82081ea350a44f702144acf2d76aa514
-
SHA1
86636c0443f4dbdb04d72490dec4fa7ed908fbef
-
SHA256
96c31c5c17cdefe7535a506f8ee4e1b874cbf57ebea6da3d7314f6ea96f22246
-
SHA512
8a0f2a994afe8cf00c77634aa96bdfe2770aa7bf840569988514ac76808c946c323aebbabe5d7b3817a1ae22c145dee39776e61ad68a8fddcb3ed8b4c5c37d05
-
SSDEEP
24576:vYInEEIg/kgJng/ziNJMQo1EWYA+oYe27j6mtDrnaC6LzzMGL63TYlVkW:QiXJCz2JMHuLvjFaD3zLLCCk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96c31c5c17cdefe7535a506f8ee4e1b874cbf57ebea6da3d7314f6ea96f22246
Files
-
96c31c5c17cdefe7535a506f8ee4e1b874cbf57ebea6da3d7314f6ea96f22246.dll windows x86
37442bd10964caf7dce903586f50b6fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
version
GetFileVersionInfoSizeA
gdi32
GetGraphicsMode
Polyline
user32
GetGUIThreadInfo
TrackPopupMenu
DefDlgProcA
MenuItemFromPoint
IsIconic
DialogBoxIndirectParamA
kernel32
GetVersion
UnlockFile
GetProcessHeap
InterlockedPushEntrySList
EnumSystemCodePagesW
TerminateProcess
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
SetConsoleCursorPosition
DeleteTimerQueueEx
GetMailslotInfo
GetCurrentConsoleFont
GetFileInformationByHandle
lz32
LZCopy
LZOpenFileW
LZClose
msvcrt
memset
advapi32
ImpersonateNamedPipeClient
SetServiceStatus
RegReplaceKeyA
WriteEncryptedFileRaw
RegCloseKey
Sections
.text Size: 832KB - Virtual size: 830KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384KB - Virtual size: 381KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 872B
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ