jbnamm
Static task
static1
Behavioral task
behavioral1
Sample
4072dbdd390ef92830576396ddbbdbf8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4072dbdd390ef92830576396ddbbdbf8.dll
Resource
win10v2004-20231215-en
General
-
Target
4072dbdd390ef92830576396ddbbdbf8
-
Size
20KB
-
MD5
4072dbdd390ef92830576396ddbbdbf8
-
SHA1
6af58aa0705592237744af1d402f39ff3d778fa1
-
SHA256
b1217ef5b9117c0e35bb2b262b00fdb0f3cdcc2a60628f134c2580d12b3fe9c0
-
SHA512
ddb84fe2ddee1d2e9bb2d5ebac9eaa56f8068d85df56a283b1826a295a3da89e5c5791e5392447e7d366d6294366e3f0971495b1591a8b80c6e656769dd05c1c
-
SSDEEP
384:iuUHdtpKKvDazNnPMg7Fa9qtZfDlf0BPigNyzXkvcUmuM3:iT9tpfD6Mg0925Z8TyLkh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4072dbdd390ef92830576396ddbbdbf8
Files
-
4072dbdd390ef92830576396ddbbdbf8.dll windows:4 windows x86 arch:x86
f217fd28dd13fe677aae820731712218
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
wsprintfA
TranslateMessage
SetScrollRange
SetScrollPos
SetScrollInfo
SetDlgItemTextA
SendMessageA
ScrollWindowEx
ReleaseDC
RegisterClassExA
PostQuitMessage
MessageBoxA
MapDialogRect
LoadMenuA
LoadImageA
LoadIconA
LoadCursorA
IsRectEmpty
InvalidateRect
GetSystemMetrics
GetScrollPos
GetMessageA
GetDlgItemTextA
GetDC
GetClientRect
EndPaint
EndDialog
DispatchMessageA
DialogBoxParamA
DefWindowProcA
DefDlgProcA
DdeDisconnect
DdeCreateDataHandle
DdeAddData
CreateWindowExA
BeginPaint
CallWindowProcW
kernel32
Sleep
SleepEx
SystemTimeToFileTime
RtlMoveMemory
_lread
_lwrite
lstrcatA
OpenMutexA
LoadLibraryExA
_llseek
LoadLibraryA
InitAtomTable
GlobalLock
GlobalFree
GlobalAlloc
GetTickCount
GetSystemTime
GetProcessHeaps
GetModuleHandleA
GetFileSize
GetCommandLineA
FlushViewOfFile
ExitThread
ExitProcess
EnumTimeFormatsA
DeviceIoControl
DeleteAtom
CreateThread
CreateFileA
CloseHandle
BeginUpdateResourceA
Beep
AddAtomA
comdlg32
GetOpenFileNameA
comctl32
ord17
gdi32
BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetDeviceCaps
GetGlyphIndicesA
GetObjectA
SelectObject
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ