Static task
static1
Behavioral task
behavioral1
Sample
52badb670c8faba533fd1320a12070d95f4916d2690c582d1d1418d6316a4d8a.dll
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
52badb670c8faba533fd1320a12070d95f4916d2690c582d1d1418d6316a4d8a.dll
Resource
win10-20231129-en
General
-
Target
52badb670c8faba533fd1320a12070d95f4916d2690c582d1d1418d6316a4d8a
-
Size
3.2MB
-
MD5
a5ef0d491ea3ce2d2e0c91085cc4bb7f
-
SHA1
9e56f9d8eacfb2064e2a0c5112544bcf8046855b
-
SHA256
52badb670c8faba533fd1320a12070d95f4916d2690c582d1d1418d6316a4d8a
-
SHA512
69a0f18a917b66d61bd2bc0746fbb372794c170c10ce2eda42d7e63cc95a48d99ad874a6007919c5a3679cd0d01980bba7f92839df2fd7eebf4fce82d7aad76d
-
SSDEEP
49152:TYHviWuvnjaglUzFcgip0cCtghi8rWuM1vWk3X86Pv2vW9qn+sUVNO:EiPWLc5NC6hi8CZ/vRvs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52badb670c8faba533fd1320a12070d95f4916d2690c582d1d1418d6316a4d8a
Files
-
52badb670c8faba533fd1320a12070d95f4916d2690c582d1d1418d6316a4d8a.dll windows:5 windows x86 arch:x86
77640c5c8ec8d4f1a5f3cce6fc91be10
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gdi32
SetROP2
SetMapMode
kernel32
LoadLibraryExA
InterlockedPushEntrySList
GetModuleFileNameW
WTSGetActiveConsoleSessionId
TryEnterCriticalSection
LoadLibraryA
GetProcAddress
user32
UpdateWindow
GetDCEx
GetKeyboardLayout
oleaut32
GetRecordInfoFromGuids
setupapi
CM_Get_Device_ID_Size_Ex
msvcrt
memset
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
=N Size: 140KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ