EhoftahalllqheTefnre
Static task
static1
Behavioral task
behavioral1
Sample
68c87269702eaa4880faadb0494a2fe07b07f2d4e4e3a04ad47dfa681838974f.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
68c87269702eaa4880faadb0494a2fe07b07f2d4e4e3a04ad47dfa681838974f.dll
Resource
win10-20231023-en
General
-
Target
68c87269702eaa4880faadb0494a2fe07b07f2d4e4e3a04ad47dfa681838974f
-
Size
1.6MB
-
MD5
70d087df08df5ec01a222b21bee83136
-
SHA1
abfea81c64daf3b9b8d2f3a7298d009fd05db273
-
SHA256
68c87269702eaa4880faadb0494a2fe07b07f2d4e4e3a04ad47dfa681838974f
-
SHA512
2f396b66c53c221eb59f94354450ea3582f3e8055b8e587db166c731cdfd7356a53a8e0f1a142eb1604ce025f8f1da2ae8c695374da826f3e25b561c9b0ad6c5
-
SSDEEP
49152:xACPnMSNi0FiIlW+rwhBr/pkRNz9VhXxxe:xACPMSNA+GDpkI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68c87269702eaa4880faadb0494a2fe07b07f2d4e4e3a04ad47dfa681838974f
Files
-
68c87269702eaa4880faadb0494a2fe07b07f2d4e4e3a04ad47dfa681838974f.dll windows:5 windows x86 arch:x86
673607ca4c4186cda7b63e5d01a36330
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ole32
HPALETTE_UserFree
StgSetTimes
OleSetMenuDescriptor
esent
JetCommitTransaction
user32
ToAscii
SetClipboardData
ExcludeUpdateRgn
GetMessageA
GetMessagePos
ShowWindow
GetKeyboardState
GetDlgCtrlID
DrawIconEx
oleaut32
GetErrorInfo
SysAllocStringLen
SafeArrayCreate
rpcrt4
UuidFromStringA
msvfw32
DrawDibRealize
advapi32
RegCloseKey
shlwapi
UrlIsW
StrChrNW
kernel32
SetStdHandle
GetProcessHeap
FindNextFileW
GetOverlappedResult
GetCurrentProcess
GenerateConsoleCtrlEvent
GetFileType
OutputDebugStringA
GetModuleFileNameW
LoadLibraryExA
GetVersionExA
GetLastError
SetEvent
IsProcessorFeaturePresent
msvcrt
rand
memset
Exports
Exports
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ