Static task
static1
Behavioral task
behavioral1
Sample
e8f01484c55aedfcccebb8c0599a165e78ced2f3e63223f6fbdcd92d78305ffa.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e8f01484c55aedfcccebb8c0599a165e78ced2f3e63223f6fbdcd92d78305ffa.dll
Resource
win10-20230915-en
General
-
Target
e8f01484c55aedfcccebb8c0599a165e78ced2f3e63223f6fbdcd92d78305ffa
-
Size
1.4MB
-
MD5
64e04aa44766d3a1edf8362bbaba0a1c
-
SHA1
2605422b1bb3ddfa67e5c82229627aa06d2cd926
-
SHA256
e8f01484c55aedfcccebb8c0599a165e78ced2f3e63223f6fbdcd92d78305ffa
-
SHA512
14a6dfee7bbb9dc566db3c5b35f022054947a6ff23a43451a71efaa43cc5411d68492455d4a359d1c22f44a23366584399f7fa843d82958b8477ae1c17638829
-
SSDEEP
24576:fJmyeKfuSBsRsq0iuSNDMRPnMyJ8q6NXBoJu5ubUrl3z9n+IUYgkVRDufwzHn9u:fVpj6RhhLMRvMyJW/u6thUkfFB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8f01484c55aedfcccebb8c0599a165e78ced2f3e63223f6fbdcd92d78305ffa
Files
-
e8f01484c55aedfcccebb8c0599a165e78ced2f3e63223f6fbdcd92d78305ffa.dll windows x86
a2b77dbfb075cef122add2987f6db0d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
AssocIsDangerous
SHCreateStreamOnFileW
StrCmpNA
ColorRGBToHLS
advapi32
SetSecurityDescriptorSacl
GetLengthSid
ReadEncryptedFileRaw
GetSecurityDescriptorControl
msvcrt
iswprint
memset
clusapi
ClusterRegEnumValue
comdlg32
FindTextW
crypt32
CertCompareCertificateName
gdi32
SetColorSpace
SelectClipPath
GetPolyFillMode
PlgBlt
CreateFontA
OffsetClipRgn
rpcrt4
RpcBindingInqAuthClientExW
NdrSimpleStructBufferSize
UuidCreateNil
ole32
OleGetIconOfClass
OleRegEnumFormatEtc
CreateStreamOnHGlobal
OleMetafilePictFromIconAndLabel
StgCreateDocfile
CoRevertToSelf
user32
GetGUIThreadInfo
GetDlgItem
ActivateKeyboardLayout
AdjustWindowRect
SetClipboardData
MonitorFromRect
VkKeyScanA
GetIconInfo
GetCursorPos
GetParent
oleaut32
DispGetIDsOfNames
kernel32
SetConsoleCursorInfo
GetModuleFileNameA
GetTimeZoneInformation
GetFileSize
GetShortPathNameW
SizeofResource
ConnectNamedPipe
GetModuleHandleA
GetModuleFileNameW
GetBinaryTypeW
GetUserDefaultLCID
LockFile
TryEnterCriticalSection
wintrust
CryptCATEnumerateAttr
CryptCATGetAttrInfo
opengl32
glVertex3f
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 676KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt1 Size: 284KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yid Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FZrm5 Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erloc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ