Static task
static1
Behavioral task
behavioral1
Sample
cec8a4e66c9365d3797ec04e9aea8a7f7c27084e27afcf0455ead3eed5e7f9a7.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
cec8a4e66c9365d3797ec04e9aea8a7f7c27084e27afcf0455ead3eed5e7f9a7.dll
Resource
win10-20231215-en
General
-
Target
cec8a4e66c9365d3797ec04e9aea8a7f7c27084e27afcf0455ead3eed5e7f9a7
-
Size
2.2MB
-
MD5
58cbffaa73378b586e2b5b1f3254cde4
-
SHA1
13ee2217d33a1d9a2b141c19d8502fc13120c6ea
-
SHA256
cec8a4e66c9365d3797ec04e9aea8a7f7c27084e27afcf0455ead3eed5e7f9a7
-
SHA512
0295794336605aec658bc15afe695b9d808024ba87f0486168f8c6fe057b8fb710762bf84b1b7e384b68fb39942b9fae37a70d26df58545f5faac3ee46203926
-
SSDEEP
49152:v4VKmCrCq+QD5OjtPw5Ns5caLw+3xtfiFLxre9iCQb/Zyg:v4gmCryoYgza/3xtfiRJcg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cec8a4e66c9365d3797ec04e9aea8a7f7c27084e27afcf0455ead3eed5e7f9a7
Files
-
cec8a4e66c9365d3797ec04e9aea8a7f7c27084e27afcf0455ead3eed5e7f9a7.dll windows:5 windows x86 arch:x86
75f68dd29dbae105209dc11b0086ff24
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
SHAutoComplete
gdi32
GetTextAlign
kernel32
GetLogicalDrives
GetModuleFileNameA
OpenMutexA
WaitForSingleObjectEx
DeleteCriticalSection
lstrcmpiA
QueryPerformanceCounter
SetStdHandle
CreateEventA
OutputDebugStringA
GetModuleFileNameW
CloseHandle
rpcrt4
NdrPointerBufferSize
ws2_32
WSAGetLastError
setupapi
SetupDiEnumDeviceInfo
user32
ShowWindow
GetDlgItemInt
DrawCaption
oleaut32
SafeArrayCreate
GetRecordInfoFromGuids
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 520KB - Virtual size: 519KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ