CreateNetIDPropertyPage
Static task
static1
Behavioral task
behavioral1
Sample
244f73127895e07af83f937f9dca244e1ff46d41517ba899253eddc23708228d.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
244f73127895e07af83f937f9dca244e1ff46d41517ba899253eddc23708228d.dll
Resource
win10v2004-20230703-en
General
-
Target
244f73127895e07af83f937f9dca244e1ff46d41517ba899253eddc23708228d
-
Size
177KB
-
MD5
9c15ef3d464f90b5c397ce07eccf9ae5
-
SHA1
535735c5a4b0a9cfa0536b0fffc8b3d5d917a31b
-
SHA256
244f73127895e07af83f937f9dca244e1ff46d41517ba899253eddc23708228d
-
SHA512
9783becf95b7b80eed82193f8032c33379fa1f02e4f72993e5e3bbfff11af7355e1814c949a9ffa634641f2c68e1977baafdd30df4e28dea6e9b0dd32cdf7d75
-
SSDEEP
3072:gI1gVahyNdjdGje7hUZJw2lct5EurjrNlsWn8lqsiUNXbDDoa/:f1gVahyNtd+e7hUZJw25LDDo2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 244f73127895e07af83f937f9dca244e1ff46d41517ba899253eddc23708228d
Files
-
244f73127895e07af83f937f9dca244e1ff46d41517ba899253eddc23708228d.dll windows x86
7e3c73913757462c0cd1f4fd69a01742
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
comctl32
CreatePropertySheetPageW
kernel32
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
GetComputerNameW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
QueryPerformanceCounter
SetComputerNameW
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
_winmajor
abort
calloc
free
fwrite
malloc
memmove
strncmp
swprintf
vfprintf
wcscmp
wcslen
netapi32
NetApiBufferFree
NetGetJoinInformation
NetWkstaGetInfo
user32
DialogBoxParamW
EnableWindow
EndDialog
GetDlgItem
GetDlgItemTextW
GetParent
GetWindowTextW
LoadStringW
MessageBoxW
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 980B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 19KB - Virtual size: 19KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ