Static task
static1
Behavioral task
behavioral1
Sample
aed16d3821aa15cf626a8f4d0c9d0e5b1a5a7deb846d1c9a4ae7df6e65508135.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
aed16d3821aa15cf626a8f4d0c9d0e5b1a5a7deb846d1c9a4ae7df6e65508135.dll
Resource
win10-20230703-en
General
-
Target
aed16d3821aa15cf626a8f4d0c9d0e5b1a5a7deb846d1c9a4ae7df6e65508135
-
Size
2.3MB
-
MD5
d79a4e554898b6e5b010bd1c49bc099e
-
SHA1
6e2344f9989548b792cda14c48358ff8b15ac7d0
-
SHA256
aed16d3821aa15cf626a8f4d0c9d0e5b1a5a7deb846d1c9a4ae7df6e65508135
-
SHA512
85480bc106b2d30b6d92d0a9f8b81630f65663b41bb0f60cb0c214157ad615fd1671e6b67efdc4d2316580c816a71f9b19f44263ece04535829ccc12b743b5f6
-
SSDEEP
49152:l6dXELw5O6vI/RP4gfskcsWACaSYh1oTN3n:l6dXl8trsjs4aXO3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aed16d3821aa15cf626a8f4d0c9d0e5b1a5a7deb846d1c9a4ae7df6e65508135
Files
-
aed16d3821aa15cf626a8f4d0c9d0e5b1a5a7deb846d1c9a4ae7df6e65508135.dll windows x86
39a24aa88883c174f218fd60350c124f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
version
GetFileVersionInfoW
mscms
GetColorProfileElement
comdlg32
PrintDlgW
gdi32
GetFontUnicodeRanges
SetDIBits
GdiSetBatchLimit
ExcludeClipRect
CreateSolidBrush
lz32
LZOpenFileA
LZOpenFileW
advapi32
RegCloseKey
oleaut32
GetRecordInfoFromGuids
GetErrorInfo
shell32
ShellExecuteW
ShellAboutA
user32
CreateWindowExA
DefWindowProcA
LookupIconIdFromDirectoryEx
UpdateWindow
ShowWindow
EnableScrollBar
kernel32
LoadLibraryA
SetStdHandle
WaitForSingleObject
GetProcessHeap
Process32FirstW
GetProcAddress
DeleteCriticalSection
IsBadCodePtr
EnterCriticalSection
LoadLibraryW
CloseHandle
GetModuleFileNameA
TerminateProcess
setupapi
SetupDiDestroyDeviceInfoList
Sections
.text Size: 568KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KG3E Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erloc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 128KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ekxRSL Size: 252KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ