wine_notify_icon
Static task
static1
Behavioral task
behavioral1
Sample
4b5dd5237d0067eeef8dd647a392fb625d4e0c63e936ac1f12e375b5b1ca3507.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4b5dd5237d0067eeef8dd647a392fb625d4e0c63e936ac1f12e375b5b1ca3507.dll
Resource
win10v2004-20230703-en
General
-
Target
4b5dd5237d0067eeef8dd647a392fb625d4e0c63e936ac1f12e375b5b1ca3507
-
Size
160KB
-
MD5
1bba8e3f540cbd09012195ada7d5a480
-
SHA1
6267f4a3738986fae1d4edb0720226b7aa1c296d
-
SHA256
4b5dd5237d0067eeef8dd647a392fb625d4e0c63e936ac1f12e375b5b1ca3507
-
SHA512
028e4e4046c6ca9deaf0af59156b8e3c298722be281f6e39ec2d4f06ba3e98bbe758598a7eee480aff3464c898da33aa0ce98be7106612e7325dd611852d6917
-
SSDEEP
1536:GMMnoqnDI/H+dKY0nINF+59Ia9I6CcR8OAW8oicY4uwLY92fXfnmc:utUZl5ikfuwZXfmc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b5dd5237d0067eeef8dd647a392fb625d4e0c63e936ac1f12e375b5b1ca3507
Files
-
4b5dd5237d0067eeef8dd647a392fb625d4e0c63e936ac1f12e375b5b1ca3507.dll windows x86
82cc99f4bfd88bc13dcb07eec04b79fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
DelayLoadFailureHook
DisableThreadLibraryCalls
DuplicateHandle
EnumResourceNamesW
FindResourceW
FreeResource
GetModuleHandleW
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
LoadResource
LockResource
MapViewOfFile
OpenProcess
ResolveDelayLoadedAPI
TerminateProcess
UnmapViewOfFile
VirtualQuery
ntdll
NtQueryVirtualMemory
RtlGetLastWin32Error
_vsnprintf
ucrtbase
__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memcmp
memcpy
memmove
strchr
strcmp
strcspn
strlen
user32
CreateIconFromResourceEx
EnumWindows
GetClientRect
GetClipboardFormatNameW
GetParent
GetPropW
GetWindowLongW
GetWindowThreadProcessId
IsWindow
LoadStringW
PostMessageW
ScreenToClient
SendMessageCallbackW
WindowFromPoint
win32u
NtUserCallHwndParam
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 4KB - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 200B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ