Static task
static1
Behavioral task
behavioral1
Sample
5ffb3f375805faf7235d8bf0aadb64ac9acf086d203e233748347f21ae8b962f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5ffb3f375805faf7235d8bf0aadb64ac9acf086d203e233748347f21ae8b962f.dll
Resource
win10-20231220-en
General
-
Target
5ffb3f375805faf7235d8bf0aadb64ac9acf086d203e233748347f21ae8b962f
-
Size
2.1MB
-
MD5
f3e732b7020bb7c4a4f444fc1d6c6ef9
-
SHA1
44c9b3c7171e0f3dd654c7c50ed04126326dc6b9
-
SHA256
5ffb3f375805faf7235d8bf0aadb64ac9acf086d203e233748347f21ae8b962f
-
SHA512
7df551a8d4c436444549a602068b386f06e4f4cd9de45ea996a2d09f4c22f22f431943a549c53022bdd9cb68990d871360f45e31a158294cd3107e6ef825c59f
-
SSDEEP
49152:Nty+RvZimcOJfAmuGcFM2/JaKCps+FokiGHB0PIRkp:zyMvMmp9cLsYXMXk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ffb3f375805faf7235d8bf0aadb64ac9acf086d203e233748347f21ae8b962f
Files
-
5ffb3f375805faf7235d8bf0aadb64ac9acf086d203e233748347f21ae8b962f.dll windows:5 windows x86 arch:x86
9882a9ac9265a4ff5053c91bb63c942b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
DeleteService
gdi32
GdiFlush
SetMapperFlags
shell32
SHCreateShellItem
setupapi
SetupDiEnumDeviceInfo
oleaut32
SafeArrayCreate
GetRecordInfoFromGuids
rpcrt4
RpcIfInqId
kernel32
GetBinaryTypeW
GetModuleFileNameW
LoadLibraryExW
GetTickCount
SetConsoleMode
GetACP
WaitForSingleObjectEx
DeleteCriticalSection
SetStdHandle
CreateEventA
QueryPerformanceCounter
CreateTimerQueueTimer
EnumResourceTypesA
OutputDebugStringA
CloseHandle
LoadLibraryW
ws2_32
WSAGetLastError
user32
GetDC
GetLastInputInfo
ShowWindow
PtInRect
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 992KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 696KB - Virtual size: 694KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CONST Size: 364KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ