ohuenyiaq
Static task
static1
Behavioral task
behavioral1
Sample
593ae51744a3a1518c88249d88f6e0d8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
593ae51744a3a1518c88249d88f6e0d8.dll
Resource
win10v2004-20231215-en
General
-
Target
593ae51744a3a1518c88249d88f6e0d8
-
Size
30KB
-
MD5
593ae51744a3a1518c88249d88f6e0d8
-
SHA1
799fc91d7871e4387fd487da8c066a5908263088
-
SHA256
f5b07baf233029ae6a86a512fd84161c07d27827ef0222eea9783296249f646b
-
SHA512
91d538a964f803b97b5983ca7bfab265cbfca1d481c9da7038d478bef56cea033cd9fc7acaf18b5a9680fb684cacab950df66fc9b4264ba8b5ed63c56e80cf6a
-
SSDEEP
384:qXR1YCNE0PHVORyEN1EzzSO4A37//YriYpYz83wolkxZP8Zi9Gsn9/0VlFaCu5Qi:qB1jE0NORy+O4Y7Hw/pUoksZeG+9/MA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 593ae51744a3a1518c88249d88f6e0d8
Files
-
593ae51744a3a1518c88249d88f6e0d8.dll windows:6 windows x86 arch:x86
db77cde878b748fedffeba5b8a6de48f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlGetLocationA
SHSetValueA
PathBuildRootW
StrCmpNW
PathIsRelativeA
UrlIsOpaqueA
SHIsLowMemoryMachine
StrCSpnIA
kernel32
HeapAlloc
EnumSystemCodePagesW
GetProcessHeap
msi
ord40
ord33
ord43
ord72
ord150
ord44
ord56
wsnmp32
ord999
ord501
ord204
ord200
ord905
gdi32
CreateRectRgnIndirect
CreateDiscardableBitmap
SetBkMode
GetOutlineTextMetricsA
CreateEllipticRgnIndirect
SetDeviceGammaRamp
gdiPlaySpoolStream
loadperf
LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
LoadPerfCounterTextStringsA
odbc32
ord145
ord236
ord27
ord276
ord38
ord17
mscms
GetPS2ColorSpaceArray
GetColorProfileHeader
EnumColorProfilesW
GenerateCopyFilePaths
RegisterCMMA
GetColorDirectoryW
DisassociateColorProfileFromDeviceA
CheckBitmapBits
msvcrt
memset
towupper
free
_initterm
malloc
_adjust_fdiv
towlower
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 20B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ