Static task
static1
Behavioral task
behavioral1
Sample
1c83d977221411697fbbafe6c8bd91f2.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1c83d977221411697fbbafe6c8bd91f2.dll
Resource
win10v2004-20231215-en
General
-
Target
1c83d977221411697fbbafe6c8bd91f2
-
Size
160KB
-
MD5
1c83d977221411697fbbafe6c8bd91f2
-
SHA1
60bdfdae512c97dbb4f99619be7c535014e1781a
-
SHA256
76d02a1ad95122dd511b403ad652ffd027289e72674e51bf61b11f8101a0d2b9
-
SHA512
086526d69d3a6ac3589bd6592deb1eb3b16ec88d7e9bf9ef5c7fb2b4076f031291aee8bb437486d45d99f4819139c8691be0f117c76b261a5886248cada4f06b
-
SSDEEP
3072:fhSnrOdae0QFO8i0cd/OqQ5MQnglMMqqDLy/AhmGTWp41AJN/H:fQn8tHcw57KqqDLuImGTWcAX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c83d977221411697fbbafe6c8bd91f2
Files
-
1c83d977221411697fbbafe6c8bd91f2.dll windows:4 windows x86 arch:x86
e4ce44af32498c053a880d48c278d340
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FindClose
FindFirstFileA
UnmapViewOfFile
lstrcmpA
MapViewOfFile
CloseHandle
CreateFileMappingA
GetFileSize
CreateFileA
lstrcatA
InterlockedDecrement
GetFileAttributesA
GetTimeZoneInformation
FindNextFileA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsFree
TerminateProcess
ExitProcess
LocalFree
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WaitForSingleObjectEx
CancelWaitableTimer
GetCommandLineW
GetDriveTypeW
GetConsoleOutputCP
CreateEventW
CreateWaitableTimerW
GetConsoleMode
SetConsoleMode
ReadConsoleW
WaitForSingleObject
FormatMessageW
GetStdHandle
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterW
SetConsoleCursorPosition
SetEvent
lstrcpynA
Sleep
GetModuleHandleW
InterlockedCompareExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrlenW
lstrcmpiW
GetModuleFileNameW
InterlockedIncrement
GetVersionExW
VirtualAlloc
VirtualQuery
MultiByteToWideChar
lstrcpyW
lstrcpynW
LoadLibraryW
lstrcatW
GetFileAttributesW
GetLocaleInfoA
GetStringTypeW
GetSystemInfo
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
WriteFile
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
GetProfileStringA
GetPrivateProfileStringA
GetProcAddress
FreeLibrary
ExpandEnvironmentStringsA
lstrlenA
lstrcpyA
LoadLibraryA
lstrcmpiA
GetVersionExA
LocalAlloc
TlsAlloc
VirtualProtect
InterlockedExchange
GetCommandLineA
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleHandleA
RtlUnwind
user32
SendMessageA
GetWindowLongA
GetDlgItem
DestroyWindow
SetTimer
ShowWindow
SetWindowTextA
DispatchMessageA
TranslateMessage
CharPrevW
CharNextW
SetWindowLongA
EndDialog
EnableWindow
wsprintfA
LoadStringA
CreateDialogParamA
CharPrevA
GetDlgItemTextA
SetDlgItemTextA
GetParent
MessageBoxA
KillTimer
PeekMessageA
advapi32
RegEnumKeyExW
RegEnumValueW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegCreateKeyExW
ole32
CoCreateInstance
CoGetMalloc
CoTaskMemAlloc
CLSIDFromString
CoTaskMemFree
CoInitializeEx
StringFromGUID2
CoTaskMemRealloc
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ