GetClass
Static task
static1
Behavioral task
behavioral1
Sample
972d75aeda58274d396e5adf1ad35e5a.dll
Resource
win7-20231215-en
General
-
Target
972d75aeda58274d396e5adf1ad35e5a
-
Size
253KB
-
MD5
972d75aeda58274d396e5adf1ad35e5a
-
SHA1
186d436bbdea3b692ac74886570071647e8e0456
-
SHA256
d53b819e793ac21a76cfb93afd3a5ae424d629dbfcb61d48f3a32a2e8e18d438
-
SHA512
b3078a5513e88de447e1bbef16ea385bfa95b0591035dbbebf780b42333c53abe1e3ab77ffb0d684ce5d914662dc529b4ee9c98d11821d806e9ba0019515b05d
-
SSDEEP
3072:0PQdEOItJPxluIalXQOr+nxQNBO0jTL23i7eBnaVImWeqSR4G78SYSuDSMv6UWv:MUr+nxQNBO0jf2Ee5aSzeF4DSY7Dh6R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 972d75aeda58274d396e5adf1ad35e5a
Files
-
972d75aeda58274d396e5adf1ad35e5a.dll windows:4 windows x86 arch:x86
8ce87900279a2c5d67be86bdc38f51d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect
GetCurrentThread
GetConsoleCP
GetACP
GlobalFindAtomW
RemoveDirectoryA
comctl32
InitCommonControls
comdlg32
FindTextA
ReplaceTextA
PrintDlgExW
winmm
mid32Message
oledlg
OleUIChangeIconA
oleaut32
VarDecFromUI2
user32
GetRawInputBuffer
shell32
OpenAs_RunDLLA
ShellHookProc
SHInvokePrinterCommandA
SHFind_InitMenuPopup
FreeIconList
winspool.drv
PlayGdiScriptOnPrinterIC
AddPrintProcessorA
version
VerInstallFileW
VerFindFileA
VerFindFileW
GetFileVersionInfoSizeA
oleacc
IID_IAccessible
ole32
ReleaseStgMedium
CoGetSystemSecurityPermissions
gdi32
GetClipRgn
gdiplus
GdipVectorTransformMatrixPointsI
GdipIsStyleAvailable
shlwapi
SHGetValueW
ChrCmpIW
imagehlp
FindExecutableImage
ImageUnload
SymEnumSym
SymInitialize
msimg32
vSetDdrawflag
Exports
Exports
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 98.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdatat Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ