TponfKheem
Static task
static1
Behavioral task
behavioral1
Sample
db63fbb4c3833466507d07dc42000e7941976b23c6eb773c54ed9a1751874508.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
db63fbb4c3833466507d07dc42000e7941976b23c6eb773c54ed9a1751874508.dll
Resource
win10v2004-20230915-en
General
-
Target
db63fbb4c3833466507d07dc42000e7941976b23c6eb773c54ed9a1751874508
-
Size
1.4MB
-
MD5
cd819ca2e8f7cc9e62e5aa42282b82ce
-
SHA1
0bc3f0455b62b7559b6cd24cd9fbc58e87a66b9b
-
SHA256
db63fbb4c3833466507d07dc42000e7941976b23c6eb773c54ed9a1751874508
-
SHA512
75752909b436b40034ccd0e8afeeff4182554f2309995da004d82b187bcf9728654c5e723fa418134c56b551dbffc4ddee4c3d50875d3fd7003a3ab24715ac3d
-
SSDEEP
24576:tNqQcEv+3SE5sx1U4BOrp9HM/UTDZiFriloNgYVdkDWyj:PkCNx1URLFPIWlo9kD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db63fbb4c3833466507d07dc42000e7941976b23c6eb773c54ed9a1751874508
Files
-
db63fbb4c3833466507d07dc42000e7941976b23c6eb773c54ed9a1751874508.dll windows:5 windows x86
4170f8d4db45e2027855e7436472b603
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shell32
ShellExecuteA
ShellExecuteExA
kernel32
GetBinaryTypeW
SetConsoleCursorInfo
LockFile
ConnectNamedPipe
GetFileSize
TryEnterCriticalSection
GetModuleHandleA
CreateHardLinkW
GetModuleFileNameW
GetUserDefaultLCID
GetModuleFileNameA
CreateNamedPipeW
GetLogicalDriveStringsA
user32
GetClipboardSequenceNumber
SetClipboardViewer
MonitorFromRect
VkKeyScanA
SetClipboardData
AdjustWindowRect
ActivateKeyboardLayout
GetGUIThreadInfo
SendMessageCallbackW
GetDlgItem
rpcrt4
NdrSimpleStructBufferSize
NdrSimpleStructUnmarshall
RpcBindingInqAuthInfoExW
comdlg32
ChooseFontW
ole32
HDC_UserFree
OleMetafilePictFromIconAndLabel
CoDisableCallCancellation
CoRevokeClassObject
CoRevertToSelf
CoSetProxyBlanket
oleaut32
VarBstrCmp
msvcrt
towupper
memset
shlwapi
AssocIsDangerous
PathIsRootA
gdi32
OffsetClipRgn
SelectClipPath
GetRegionData
CreateDiscardableBitmap
GetPolyFillMode
SetWindowOrgEx
advapi32
AddAce
EqualDomainSid
GetSecurityDescriptorControl
RegSaveKeyW
clusapi
GetNodeClusterState
crypt32
CertGetValidUsages
wintrust
CryptCATGetAttrInfo
CryptCATEnumerateAttr
opengl32
glTranslated
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 676KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt1 Size: 284KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yid Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FZrm5 Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erloc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ