Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Lazy.370596.18270.30159.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Lazy.370596.18270.30159.dll
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Variant.Lazy.370596.18270.30159.dll
-
Size
2.4MB
-
MD5
6ec5372890d1f0a185e6655aa8ac67b3
-
SHA1
3affdbf63671bcdcabd7d78931868c7f491c3023
-
SHA256
0f033be393770c493f9203244d0caf37061a89e29e0093ea4fb9b0d9ea6b3536
-
SHA512
3fc230ea16bba829780a94606b25dcdb5fdc6aa8688a1be818ab587dafcf6d13fad97792d8689014b8c39061f193b88c3618ab8de1249ea9745fd67601902f72
-
SSDEEP
49152:3dTQXWrA5DgJYAUbKyjBIU42B1mmkS2p865GHAmRmaW:tMX/5MyzDSU9fpkSbvg4v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Variant.Lazy.370596.18270.30159.dll
Files
-
SecuriteInfo.com.Variant.Lazy.370596.18270.30159.dll.dll windows x86
20370949d57d42d7895b59e1b24303b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
lz32
GetExpandedNameW
LZSeek
mscms
GetStandardColorSpaceProfileW
oleaut32
GetRecordInfoFromGuids
gdi32
SetAbortProc
SetWorldTransform
MaskBlt
SetDCBrushColor
SetICMProfileA
user32
GetClassLongA
SetClipboardViewer
SetParent
ShowWindow
DefWindowProcA
CreateWindowExA
wsprintfA
ole32
CoGetTreatAsClass
kernel32
LoadLibraryA
CloseHandle
GetModuleFileNameA
OutputDebugStringA
Process32FirstW
lstrcmpiA
EnterCriticalSection
SetStdHandle
GetProcessHeap
TerminateProcess
GetPrivateProfileSectionA
DeleteCriticalSection
WaitForSingleObject
shlwapi
StrStrIW
StrChrW
setupapi
SetupDiDestroyDeviceInfoList
comdlg32
PrintDlgW
version
GetFileVersionInfoSizeW
GetFileVersionInfoA
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 160KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erloc Size: 220KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ