Static task
static1
Behavioral task
behavioral1
Sample
17a9927daccc2d01b4c6b100a335b502.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
17a9927daccc2d01b4c6b100a335b502.dll
Resource
win10v2004-20231215-en
General
-
Target
17a9927daccc2d01b4c6b100a335b502
-
Size
152KB
-
MD5
17a9927daccc2d01b4c6b100a335b502
-
SHA1
8afe3150da4715f543e29b40ca722013dd1fda6b
-
SHA256
53a0f3ce661ed042e295499755c814577ccae041911338dbe6417db63939771f
-
SHA512
4c2ed86b8a7dde07ee7fa4c927adfee3746bf838ef2b0aa5dcb6c93bed3cdf08394a39ebaba7b25dd66622e1c943940c5b14d54ebab8392ef143bb7719a13e72
-
SSDEEP
3072:BWdkQkwfiFzJ0MAfiI3hlerzbfRH3upHKjn0D5XaZRIOvpLMxS+1V:B+kwu0MAfiwnerzbf13BjnM0Izo+1V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17a9927daccc2d01b4c6b100a335b502
Files
-
17a9927daccc2d01b4c6b100a335b502.dll windows:5 windows x86 arch:x86
a593267f8ebe249773de02eb7532aef4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetPrivateProfileStringA
GetProfileStringA
GetShortPathNameA
GetStartupInfoA
GetSystemDirectoryA
GetSystemInfo
GetTempFileNameA
GetTempPathA
GetVersionExA
GetFileAttributesA
SetLastError
WriteFile
WritePrivateProfileStringA
WriteProfileStringA
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GetCurrentDirectoryA
GetCommandLineA
ExpandEnvironmentStringsA
DeleteFileA
CreateFileA
CompareStringA
CloseHandle
VirtualAllocEx
GetModuleHandleW
MultiByteToWideChar
GetProcAddress
user32
EndPaint
GetClientRect
BeginPaint
AllowSetForegroundWindow
AnimateWindow
BroadcastSystemMessageW
CallNextHookEx
ChangeDisplaySettingsExA
CharUpperW
ChildWindowFromPoint
CloseClipboard
CopyImage
CreateCursor
CreateMDIWindowW
CreateMenu
DdeEnableCallback
DdeInitializeA
DestroyCaret
DialogBoxIndirectParamW
DialogBoxParamA
DialogBoxParamW
DlgDirListA
DlgDirListComboBoxA
DlgDirListComboBoxW
DragObject
DrawAnimatedRects
DrawIcon
DrawStateA
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
PostQuitMessage
EnumClipboardFormats
ExitWindowsEx
FindWindowW
GetCapture
GetClassInfoW
GetClassNameW
GetClipboardOwner
GetDCEx
GetDesktopWindow
GetDoubleClickTime
GetIconInfo
GetKBCodePage
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetListBoxInfo
GetMenuItemID
GetPriorityClipboardFormat
GetProcessWindowStation
GetScrollInfo
GetScrollPos
GetScrollRange
GetTabbedTextExtentW
GetUserObjectInformationW
GetUserObjectSecurity
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowTextLengthW
InflateRect
InsertMenuItemW
InsertMenuW
IsIconic
LoadCursorFromFileW
LoadIconW
LockWindowUpdate
MapVirtualKeyExW
MapVirtualKeyW
MessageBoxIndirectW
OemToCharA
OpenDesktopW
OpenWindowStationW
RegisterDeviceNotificationA
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageTimeoutA
SetClassWord
SetDlgItemTextW
SetDoubleClickTime
SetParent
SetScrollInfo
SetThreadDesktop
SetUserObjectInformationW
SetWindowLongW
SetWindowWord
SetWindowsHookA
ShowCaret
ShowWindowAsync
SystemParametersInfoA
ToAscii
UnregisterHotKey
wsprintfA
DefWindowProcA
LoadCursorA
LoadIconA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
EnumChildWindows
gdi32
MoveToEx
Rectangle
CloseEnhMetaFile
DeleteEnhMetaFile
PlayEnhMetaFile
CreateEnhMetaFileA
LineTo
GetStockObject
advapi32
RegOpenKeyExA
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ