Static task
static1
Behavioral task
behavioral1
Sample
64f1ae3a36d7390f63459f647311bb5c9abfc813a3dd352b7b0994f6f703a78b.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
64f1ae3a36d7390f63459f647311bb5c9abfc813a3dd352b7b0994f6f703a78b.dll
Resource
win10v2004-20230703-en
General
-
Target
64f1ae3a36d7390f63459f647311bb5c9abfc813a3dd352b7b0994f6f703a78b
-
Size
8.1MB
-
MD5
7155e37720a0acc680264f714ac77b9a
-
SHA1
4b47ad2097f8a67da3bcf3a042a16e42328bcf93
-
SHA256
64f1ae3a36d7390f63459f647311bb5c9abfc813a3dd352b7b0994f6f703a78b
-
SHA512
a431cbc64e9b23f97c7eba3f5bce98e30ec8ecce4400e4cec12d784081e8ac6e7e79cea4d36e176a7811df5e951c2a49a60f0a64bc4f19c76fcbd2da0306bb64
-
SSDEEP
196608:UO82HCbMVO7Z39b3vVpS/r0DzwShOgxX4pwGkV:UAHqM61lft3kGX49kV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64f1ae3a36d7390f63459f647311bb5c9abfc813a3dd352b7b0994f6f703a78b
Files
-
64f1ae3a36d7390f63459f647311bb5c9abfc813a3dd352b7b0994f6f703a78b.dll windows x86
acebd6dc544c5382cd87bde3d9311397
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLocaleInfoW
GetStringTypeW
GetCPInfo
VirtualProtect
QueryPerformanceFrequency
ReadProcessMemory
QueryPerformanceCounter
SetEvent
ResetEvent
WaitForSingleObjectEx
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
InitializeSListHead
LockResource
LoadResource
SizeofResource
FindResourceW
FindResourceExW
OutputDebugStringW
FreeResource
WriteFile
FindClose
GetModuleFileNameW
CreateFileW
FindFirstFileW
FindNextFileW
GetTempPathW
RemoveDirectoryW
DeleteFileW
OutputDebugStringA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateProcessW
GetFileAttributesExW
GetACP
GetFileSize
ReadFile
LoadLibraryW
GetCurrentDirectoryW
ExitProcess
Beep
MulDiv
GetFileType
SetFilePointer
SetFileTime
DuplicateHandle
SystemTimeToFileTime
DosDateTimeToFileTime
CreateDirectoryW
GetLocalTime
InterlockedIncrement
InterlockedDecrement
EncodePointer
GlobalLock
GlobalUnlock
GlobalSize
GetLocaleInfoA
FreeLibrary
LCMapStringW
LoadLibraryA
LoadLibraryExW
CreateThread
InterlockedExchange
WriteConsoleW
IsBadReadPtr
IsBadCodePtr
VirtualQueryEx
SetFilePointerEx
GetProcessId
WaitForSingleObject
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetModuleFileNameA
MoveFileExW
GetStdHandle
SetStdHandle
GetCurrentThread
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEndOfFile
HeapCreate
FatalAppExitW
GetSystemInfo
GetVersionExW
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
CreateEventA
TryEnterCriticalSection
GetNativeSystemInfo
CompareStringW
GetProcAddress
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
SetLastError
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetModuleHandleA
VirtualAlloc
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
WideCharToMultiByte
GetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
GetDateFormatA
GetTimeFormatA
GetTickCount
GetLastError
GetCurrentThreadId
GetCurrentProcessId
MultiByteToWideChar
GetFileAttributesW
GetFileAttributesA
GetEnvironmentVariableA
CloseHandle
Sleep
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GlobalAlloc
InitializeCriticalSection
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetKeyboardLayout
TrackMouseEvent
GetMessageTime
IsChild
GetDlgCtrlID
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
RegisterClipboardFormatW
EmptyClipboard
IsClipboardFormatAvailable
MsgWaitForMultipleObjects
AppendMenuA
GetUpdateRgn
ValidateRect
DestroyCaret
SetScrollInfo
GetScrollInfo
SystemParametersInfoW
NotifyWinEvent
GetDoubleClickTime
CreatePopupMenu
DestroyMenu
TrackPopupMenu
DrawTextA
FrameRect
DestroyCursor
CreateIconIndirect
GetIconInfo
SystemParametersInfoA
MonitorFromPoint
MonitorFromRect
WaitForInputIdle
SendMessageTimeoutW
FindWindowW
GetWindowTextLengthW
GetWindowTextW
SetWindowRgn
AdjustWindowRectEx
GetPropW
SetPropW
GetSystemMetrics
EnableWindow
GetClassInfoExW
RegisterClassExW
RegisterClassW
DefWindowProcW
MoveWindow
GetGUIThreadInfo
IntersectRect
MapWindowPoints
GetCursorPos
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
ReleaseCapture
SetCapture
GetKeyState
GetFocus
GetActiveWindow
SetFocus
CharNextW
DestroyWindow
CreateWindowExW
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadCursorW
OffsetRect
UnionRect
InflateRect
SetCursor
SwitchToThisWindow
ScreenToClient
IsZoomed
GetMonitorInfoW
MonitorFromWindow
GetWindow
GetParent
ClientToScreen
GetClientRect
IsIconic
wsprintfW
MessageBoxW
GetDC
KillTimer
SetTimer
MapVirtualKeyW
GetCaretBlinkTime
GetSysColor
IsWindow
GetWindowLongW
SetWindowLongW
PostMessageW
CallWindowProcW
UnregisterClassW
IsWindowVisible
EnumWindows
GetClassNameW
GetWindowThreadProcessId
InvalidateRgn
IsRectEmpty
CreateAcceleratorTableW
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetRect
FillRect
DrawTextW
CharPrevW
GetCaretPos
PtInRect
ShowWindow
SetWindowPos
UpdateWindow
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
SetWindowTextW
GetWindowRect
GetAsyncKeyState
GetKeyNameTextW
GetUpdateRect
shlwapi
PathIsDirectoryW
PathFileExistsW
msimg32
AlphaBlend
psapi
EnumProcessModules
GetModuleInformation
imm32
ImmAssociateContext
ImmReleaseContext
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmEscapeW
ImmNotifyIME
ImmSetCandidateWindow
ImmGetContext
gdi32
RemoveFontMemResourceEx
Rectangle
RestoreDC
SaveDC
SelectObject
GetObjectW
SetWindowOrgEx
CreateRoundRectRgn
CreatePatternBrush
CreateSolidBrush
SetBkMode
SetTextColor
GetObjectA
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
GetStockObject
LineTo
DeleteObject
SelectClipRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
SetStretchBltMode
CreateDIBSection
MoveToEx
TextOutW
GdiFlush
GetDeviceCaps
CreateBitmap
CreateRectRgn
Ellipse
GetNearestColor
GetTextExtentPoint32A
GetTextExtentExPointA
GetTextExtentExPointW
IntersectClipRect
SetTextAlign
ExtTextOutA
ExtTextOutW
Polygon
CreatePen
DeleteDC
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
RoundRect
GetTextMetricsW
advapi32
RegQueryValueExW
RegOpenKeyExW
shell32
SHFileOperationW
ole32
ReleaseStgMedium
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
VariantInit
SysFreeString
SysAllocString
VariantClear
gdiplus
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetPageUnit
GdipFillRegion
GdipCreateLineBrushI
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipGraphicsClear
GdipDrawImage
GdipDrawImageRectI
GdipDeleteFontFamily
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipGetFamily
GdipDrawString
GdipSetPathGradientFocusScales
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreatePathGradientFromPath
GdipDeleteBrush
GdipCloneBrush
GdipCombineRegionRegion
GdipDeleteRegion
GdipCreateRegionPath
GdipCreateRegionRect
GdipAddPathArcI
GdipAddPathLineI
GdipDeletePath
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipCreateStringFormat
GdipCreatePath
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipSetPathGradientCenterColor
comctl32
ord17
_TrackMouseEvent
Sections
.text Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 475KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.J%| Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Q~F Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Wy4 Size: 8.1MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ