DllDeviceInfo
Static task
static1
Behavioral task
behavioral1
Sample
148afd7f1045508ecebaa4a16351b8db78e9581db6e811f51ef3876fda3d2814.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
148afd7f1045508ecebaa4a16351b8db78e9581db6e811f51ef3876fda3d2814.dll
Resource
win10v2004-20231025-en
General
-
Target
148afd7f1045508ecebaa4a16351b8db78e9581db6e811f51ef3876fda3d2814
-
Size
529KB
-
MD5
81da14d77a67081c8e18240f8b2e5ff9
-
SHA1
8bb79b2df60c293970caa453290375aa38dfb051
-
SHA256
148afd7f1045508ecebaa4a16351b8db78e9581db6e811f51ef3876fda3d2814
-
SHA512
ee310e9d6cdfe92c864d08bea1d255a679cc9da06d80607c40a47f2e7ea3b143af93384a53ea874849f1d82ce335d334d74b2f5f90bee242e8717a8abaeb32e1
-
SSDEEP
6144:lthheDT6jsD+AzdPTF1dQ6nbnWqmIQtdWiaVylPDRe9Zp24/IwwYONP4:ltDmq2DfnbnWqmXdW4hY9Zp2DN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 148afd7f1045508ecebaa4a16351b8db78e9581db6e811f51ef3876fda3d2814
Files
-
148afd7f1045508ecebaa4a16351b8db78e9581db6e811f51ef3876fda3d2814.dll windows:5 windows x86 arch:x86
8eb0cf8e5b6e848ff7ee41e20deeb38f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleW
InterlockedIncrement
GlobalFlags
GetCPInfo
SetErrorMode
RtlUnwind
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCommandLineA
HeapAlloc
HeapFree
VirtualAlloc
HeapReAlloc
ExitProcess
SetStdHandle
GetFileType
HeapSize
GetACP
IsValidCodePage
TlsFree
GetStringTypeW
LCMapStringW
GetTimeZoneInformation
GetStdHandle
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
InterlockedExchange
lstrcmpA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
lstrlenA
SetLastError
GetTickCount
DeviceIoControl
GetVersionExA
GetLastError
LoadLibraryA
GetModuleHandleA
GetProcAddress
FreeLibrary
WaitForSingleObject
TerminateProcess
Sleep
GetFileSize
GetFileAttributesA
SetFileAttributesA
CreateFileA
CloseHandle
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetOEMCP
lstrcpyA
GetModuleFileNameA
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetStringTypeA
InitializeCriticalSection
user32
LoadCursorA
CharUpperA
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
SetWindowLongA
SetWindowPos
GetWindowPlacement
GetWindowRect
GetWindow
SystemParametersInfoA
DestroyMenu
CopyRect
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
UnhookWindowsHookEx
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
DrawIcon
AppendMenuA
SendMessageA
GetSystemMenu
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
UnregisterClassA
UpdateWindow
IsIconic
GetClientRect
InvalidateRect
EnableWindow
LoadIconA
GetSystemMetrics
IsWindow
GetSysColor
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
FrameRect
GetSysColorBrush
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetMenuState
AdjustWindowRectEx
gdi32
ScaleWindowExtEx
DeleteDC
GetStockObject
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetObjectA
CreateFontA
SelectClipRgn
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextExtentPoint32A
BitBlt
CreateCompatibleDC
CreateRectRgn
CreateCompatibleBitmap
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
Exports
Exports
Sections
.text Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ