aac
Static task
static1
Behavioral task
behavioral1
Sample
a6a89ba7c264882b1d89eabf10cf6fcff314a95bcfce0dc1fa8a4efed680f080.dll
Resource
win7-20230831-en
General
-
Target
a6a89ba7c264882b1d89eabf10cf6fcff314a95bcfce0dc1fa8a4efed680f080
-
Size
76KB
-
MD5
797a0948b88006dc30375da9e4cf778c
-
SHA1
fd31647f4c6f43f27e75cf9844cbf614957c5a23
-
SHA256
a6a89ba7c264882b1d89eabf10cf6fcff314a95bcfce0dc1fa8a4efed680f080
-
SHA512
d98181c101f1a9553cc915192eaba9c439c9b22557110dd262da20deab1e94d0ca6147a336d739e5ca05ca1b8f1395d28902d74152bd299b4e25942f45a4a1ee
-
SSDEEP
1536:qrtiYdhDkjTAE5cuvE8oxaVFE18g/vgnm29OTH1Cxa9t7eje5RVv:+tvddf/u8DxEe18g/Sv0H1Pb+AXv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6a89ba7c264882b1d89eabf10cf6fcff314a95bcfce0dc1fa8a4efed680f080
Files
-
a6a89ba7c264882b1d89eabf10cf6fcff314a95bcfce0dc1fa8a4efed680f080.dll windows:4 windows x86
f9e9ff9a146ec9e8b724d3c2e0fa4070
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
PeekMessageA
ole32
CLSIDFromProgID
gdi32
GetDeviceCaps
winspool.drv
OpenPrinterA
comctl32
ord17
oledlg
ord8
oleaut32
SafeArrayGetUBound
shlwapi
PathFileExistsA
advapi32
RegCloseKey
shell32
SHGetSpecialFolderPathA
Exports
Exports
Sections
.text Size: 69KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE