CreateNetIDPropertyPage
Static task
static1
Behavioral task
behavioral1
Sample
d02034e987d4b17ae305a340a5b59016851d9d388d85d5658cbf003f8b199da4.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d02034e987d4b17ae305a340a5b59016851d9d388d85d5658cbf003f8b199da4.dll
Resource
win10v2004-20230703-en
General
-
Target
d02034e987d4b17ae305a340a5b59016851d9d388d85d5658cbf003f8b199da4
-
Size
229KB
-
MD5
8ab2bd1ec1fa4c0772408cbcdf71106e
-
SHA1
9569ad25d2eb0056bc677162e73b099ed1ad0274
-
SHA256
d02034e987d4b17ae305a340a5b59016851d9d388d85d5658cbf003f8b199da4
-
SHA512
19bcad636c76f15f1caa6ea2e34e6fe434038bb791e5212c12cc137f0d8431b8ad26d9d10630b61d2ad57dbb5115431984e53e2a85d532d67abab4f4a65d9d62
-
SSDEEP
3072:nUpNHD9Mnjr2j/eedow5Uct5Eurj4jNhQWn8vkpuysBi/Flw7+:UpNHD9MjrO/eedowIzwK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d02034e987d4b17ae305a340a5b59016851d9d388d85d5658cbf003f8b199da4
Files
-
d02034e987d4b17ae305a340a5b59016851d9d388d85d5658cbf003f8b199da4.dll windows x86
103225e24b509eb3a2b9985ef56a58b0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
comctl32
CreatePropertySheetPageW
dnsapi
DnsValidateName_W
kernel32
DeleteCriticalSection
DisableThreadLibraryCalls
DnsHostnameToComputerNameW
EnterCriticalSection
FormatMessageW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetComputerNameExW
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memmove
strncmp
vfprintf
wcscmp
wcslen
netapi32
NetApiBufferFree
NetGetJoinInformation
NetWkstaGetInfo
user32
DialogBoxParamW
EnableWindow
EndDialog
GetDlgItem
GetDlgItemTextW
GetParent
GetWindowLongW
GetWindowTextW
LoadStringW
MessageBoxW
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetWindowLongW
wsprintfW
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 972B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 21KB - Virtual size: 20KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ