Static task
static1
Behavioral task
behavioral1
Sample
c94006bb878ec9c58bed7a882b340024ba61e997fa7e4c720f3a3e28cca0ab75.dll
Resource
win10-20231020-en
Behavioral task
behavioral2
Sample
c94006bb878ec9c58bed7a882b340024ba61e997fa7e4c720f3a3e28cca0ab75.dll
Resource
win10v2004-20231023-en
General
-
Target
c94006bb878ec9c58bed7a882b340024ba61e997fa7e4c720f3a3e28cca0ab75
-
Size
1.6MB
-
MD5
6da9212d45c2a06bb2dd76dacff2d7bf
-
SHA1
5ff3f003527855bc2956153e30ecbf5ab62d149a
-
SHA256
c94006bb878ec9c58bed7a882b340024ba61e997fa7e4c720f3a3e28cca0ab75
-
SHA512
4bc581113cdc36717bdc6430ab408f310728d4dde8141b23f92a852cd2007eec2b54918e88af4662f74f407a58547d564aa4c0c455fbd3abcec73c98f3b6220c
-
SSDEEP
24576:E1t7rr6kkG+Z+WrfMQpOPTRgnEErIWFgh1U0M1:ytT6QnWv4TqEuIWuhu0C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c94006bb878ec9c58bed7a882b340024ba61e997fa7e4c720f3a3e28cca0ab75
Files
-
c94006bb878ec9c58bed7a882b340024ba61e997fa7e4c720f3a3e28cca0ab75.dll windows:5 windows x86 arch:x86
f795d97d6859941bf404e47c11f27f6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comdlg32
GetSaveFileNameA
gdi32
ModifyWorldTransform
GdiGetBatchLimit
GetClipBox
GetROP2
GetCharWidthW
GetTextColor
oleaut32
LoadTypeLibEx
user32
GetThreadDesktop
LoadImageA
DrawTextA
GetUserObjectSecurity
GetQueueStatus
FindWindowExW
DestroyAcceleratorTable
DefMDIChildProcA
GetLastInputInfo
GetKeyboardLayoutNameA
DialogBoxParamW
msvcrt
strcoll
vfwprintf
advapi32
LogonUserA
EqualSid
LookupAccountSidW
ole32
MkParseDisplayName
kernel32
GetSystemTimeAdjustment
LockResource
GetFileType
lstrcatA
GetModuleHandleA
GetSystemTime
FlushInstructionCache
GetTimeFormatA
FindFirstVolumeW
GetTempPathA
LocalAlloc
EnumResourceNamesW
GetModuleFileNameA
GetBinaryTypeA
GetProfileStringW
GetDiskFreeSpaceExW
GetCommModemStatus
FormatMessageW
Sections
.text Size: 360KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.reloc Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ