Static task
static1
Behavioral task
behavioral1
Sample
151e4f3272e02d101881a392336440b4.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
151e4f3272e02d101881a392336440b4.dll
Resource
win10v2004-20231215-en
General
-
Target
151e4f3272e02d101881a392336440b4
-
Size
58KB
-
MD5
151e4f3272e02d101881a392336440b4
-
SHA1
26cd25e19be4564cc0021521a29fe575b7b3dc3a
-
SHA256
81c60d78c49bf02251987602d7e7396b587934d28c0303312036ac38da6f2cb1
-
SHA512
73d98702e9b4a782891754274a62187f875e7ec4d883000d9ef531b810269718652acb4a2274a29e2bd6d5eca7cc217ce42c4877eb51c44acab855683f65770b
-
SSDEEP
768:BQ/Lhszxo1KOeIkUOeGxG9B5kgRr170wE5Iw1ZewHX8aOOF80pDkqcaCI:oWNTnIk5X49B5zr170H2w1ZeGXSMIaC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 151e4f3272e02d101881a392336440b4
Files
-
151e4f3272e02d101881a392336440b4.dll windows:4 windows x86 arch:x86
f033c8b8fe2a85bfab9f9987d1824cd9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapAlloc
HeapCreate
HeapFree
GetProcAddress
LoadLibraryW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
LocalFree
FormatMessageW
GlobalFree
GlobalSize
GlobalReAlloc
lstrcpyW
lstrcpynW
GetFileAttributesW
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
GetCommandLineA
GlobalAlloc
GetModuleHandleW
VirtualProtect
user32
DestroyWindow
ShowWindow
SetWindowLongW
DrawTextW
CharNextW
SetCursor
IsWindow
GetWindowLongW
CharUpperBuffW
CharLowerW
LoadStringW
LoadIconW
EnableWindow
SendMessageW
SetWindowTextW
GetParent
RedrawWindow
DefWindowProcW
GetDlgItem
gdi32
SetTextColor
GetTextExtentPointW
ExtTextOutW
msvcr71
_onexit
malloc
_initterm
free
_except_handler3
__CppXcptFilter
__dllonexit
_adjust_fdiv
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ