WndProc
Static task
static1
Behavioral task
behavioral1
Sample
83d5c34b7bc4c326610d9b5478f7167dc31ecc696d9ca9302c3baebb3f2d5b42.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
83d5c34b7bc4c326610d9b5478f7167dc31ecc696d9ca9302c3baebb3f2d5b42.dll
Resource
win10v2004-20230915-en
General
-
Target
83d5c34b7bc4c326610d9b5478f7167dc31ecc696d9ca9302c3baebb3f2d5b42
-
Size
6.5MB
-
MD5
2a050f15be423a86be057698fc76cea9
-
SHA1
c37222ba380fa91f5e753c846d73d401e867213d
-
SHA256
83d5c34b7bc4c326610d9b5478f7167dc31ecc696d9ca9302c3baebb3f2d5b42
-
SHA512
5febeb7f019d35e0e413007fe3e3496e1ab11e2c811eef91b28cd318c164e15d2f03dfb81120cfebb5e6fc06184a0949fd34cd831dbba66061d1ed6b071ddecc
-
SSDEEP
98304:IFbAY/r0elgagAQIsXLSZzKq/W/n06xwotdUpc8UHCb/dePRZ2sxnUahCowTY:IF3iaJjf8FXLm+8UHCIJrUyCs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83d5c34b7bc4c326610d9b5478f7167dc31ecc696d9ca9302c3baebb3f2d5b42
Files
-
83d5c34b7bc4c326610d9b5478f7167dc31ecc696d9ca9302c3baebb3f2d5b42.dll windows:6 windows x64
0b2f7d7ed0af85110ef8e85f08f83b6e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
WriteProcessMemory
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
CallNextHookEx
ntdll
LdrAddRefDll
Exports
Exports
Sections
.text Size: - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r6r Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.-,s Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0"v Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ