Static task
static1
Behavioral task
behavioral1
Sample
00ee60cbb3b3cbccf5cf060197162af823360166dbde6ceaeba025e44f9b7c8d.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
00ee60cbb3b3cbccf5cf060197162af823360166dbde6ceaeba025e44f9b7c8d.dll
Resource
win10v2004-20231023-en
General
-
Target
00ee60cbb3b3cbccf5cf060197162af823360166dbde6ceaeba025e44f9b7c8d
-
Size
3.4MB
-
MD5
a68e720b5379c8487d30942fe7301415
-
SHA1
18593759a21f78a225853cfd51d0cb2d0ef9fd72
-
SHA256
00ee60cbb3b3cbccf5cf060197162af823360166dbde6ceaeba025e44f9b7c8d
-
SHA512
4acdd236163f9410cbaa3bafa58b1379e041516b05613a617dcadaae73d60a2de1cd117b1d3488b29f94b9dac1f0f2671b0c28f408defe417c40991da693e5c0
-
SSDEEP
98304:TrjkpTiOZutKcinZ7BS3iGNjMHKCjGIlUYISGPSzv6:TrjkJZZUn+lS3iGNjuKRIiYOS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00ee60cbb3b3cbccf5cf060197162af823360166dbde6ceaeba025e44f9b7c8d
Files
-
00ee60cbb3b3cbccf5cf060197162af823360166dbde6ceaeba025e44f9b7c8d.dll windows:5 windows x64
b21e3a3740d8d86ba6e407914e3bdcd3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
libufun
UF_translate_variable
libugopenint
UF_VIEW_fit_view
kernel32
SetEnvironmentVariableA
user32
SendDlgItemMessageA
gdi32
GetRgnBox
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
RegEnumKeyExA
shell32
SHGetDesktopFolder
comctl32
_TrackMouseEvent
shlwapi
PathIsUNCA
ole32
ReleaseStgMedium
oleaut32
VariantClear
version
VerQueryValueA
oleacc
LresultFromObject
gdiplus
GdipAlloc
imm32
ImmGetContext
winmm
PlaySoundA
slm_runtime_windows_x64
ord1
iphlpapi
GetAdaptersInfo
ws2_32
WSAStartup
Sections
.text Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 559KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vdata Size: - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ