wujihuchu
Static task
static1
Behavioral task
behavioral1
Sample
a3593e90a742fc2286057543ed48b986ce28ebb8bfe47e60643a9e09ada6ac69.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
a3593e90a742fc2286057543ed48b986ce28ebb8bfe47e60643a9e09ada6ac69.dll
Resource
win10v2004-20231023-en
General
-
Target
a3593e90a742fc2286057543ed48b986ce28ebb8bfe47e60643a9e09ada6ac69
-
Size
1.2MB
-
MD5
2a654f556d23f80f4d72160c6e99fae3
-
SHA1
ddabdcf21fa63d88c4dd4b2652c8e61d2b9efe89
-
SHA256
a3593e90a742fc2286057543ed48b986ce28ebb8bfe47e60643a9e09ada6ac69
-
SHA512
97adfd54616a1e4ddf67884c225c3c8ceb89fc9de0a792bca781b0c62fbf758170e939e0ea3d1ac7ad73f2eba099e7cdc6f215ce42a4b4f89c84a42cbf55b22b
-
SSDEEP
24576:omLRXqpDWE7ZBRrzysrhOTiLx3Vy7A79R4nWefvPjpve4WNoey1R:eV7ZBRG/6Fy7AJR4n1jt/Uoey1R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3593e90a742fc2286057543ed48b986ce28ebb8bfe47e60643a9e09ada6ac69
Files
-
a3593e90a742fc2286057543ed48b986ce28ebb8bfe47e60643a9e09ada6ac69.dll windows:4 windows x86
50e943006823bb4fe2a7699aea7c1554
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetClipboardData
gdi32
RestoreDC
winmm
midiStreamRestart
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CoTaskMemAlloc
oleaut32
VarDateFromStr
comctl32
ord17
ws2_32
recvfrom
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: 1.2MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE