Static task
static1
Behavioral task
behavioral1
Sample
19d4350b9962e4df2d94e54a3c7d632b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
19d4350b9962e4df2d94e54a3c7d632b.dll
Resource
win10v2004-20231222-en
General
-
Target
19d4350b9962e4df2d94e54a3c7d632b
-
Size
318KB
-
MD5
19d4350b9962e4df2d94e54a3c7d632b
-
SHA1
8058326b12fed2e2d43486d8428708160db2bb57
-
SHA256
71539232bbc8e9db43ce4d3b254bfc6e4ba096b281c5e19ddff4f0481ecac8a8
-
SHA512
07995662db665703fde1feec74ca02f2c6c4e5b8d9acbdf4c14ef238b4e2fe5e00834d0db95b45e2a93da6498eb5a57071ec8f965730520eeecdb09342a2709b
-
SSDEEP
6144:c5jnK3n3Dhpvv0ZPylfVIKqx3k/gH755nuAiPdrKIJf8CugqmksvNv/tAON82Iih:c5jnK3nThpvv0ZyVVId3k/GMN7NHyS8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19d4350b9962e4df2d94e54a3c7d632b
Files
-
19d4350b9962e4df2d94e54a3c7d632b.dll windows:4 windows x86 arch:x86
d649af566ec3b7b57c58c6f8ab0fd7e7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
Shell_NotifyIconA
kernel32
GetACP
IsBadHugeReadPtr
GlobalAlloc
GetProcAddress
LocalAlloc
VirtualAlloc
ExitThread
GetModuleHandleA
LoadLibraryExA
LoadLibraryA
ExitProcess
GetLastError
msvcrt
swprintf
sprintf
strcmp
wcschr
wcstol
rand
memcpy
user32
OffsetRect
LoadKeyboardLayoutA
InsertMenuItemA
ActivateKeyboardLayout
GetClientRect
EnableScrollBar
SetWindowPos
IsDialogMessageW
InsertMenuA
GetActiveWindow
GetClassInfoA
CreateWindowExA
FrameRect
GetClassNameA
SetForegroundWindow
DefMDIChildProcA
GetPropA
IsZoomed
SetMenu
EnableMenuItem
MapWindowPoints
SetCursor
CharUpperBuffA
OemToCharA
ScreenToClient
CharNextA
GetKeyState
SetActiveWindow
InvalidateRect
GetForegroundWindow
SetClassLongA
GetClipboardData
LoadCursorA
DestroyIcon
EqualRect
GetKeyNameTextA
CharLowerBuffA
EnumThreadWindows
SetWindowPlacement
DrawEdge
InflateRect
RegisterClipboardFormatA
EmptyClipboard
CheckMenuItem
PtInRect
MsgWaitForMultipleObjects
GetScrollInfo
GetSystemMetrics
ShowWindow
IsWindowEnabled
GetMessagePos
GetKeyboardLayoutList
TranslateMessage
LoadStringA
SetCapture
GetFocus
GetKeyboardType
CreateIcon
CallWindowProcA
wsprintfA
IntersectRect
RemovePropA
GetMenuItemInfoA
GetSystemMenu
DispatchMessageA
SetClipboardData
UnregisterClassA
SetPropA
DrawMenuBar
GetSysColor
PostQuitMessage
GetWindowTextA
CharToOemA
EnumWindows
SetTimer
TrackPopupMenu
GetCursor
GetSysColorBrush
GetTopWindow
DrawFrameControl
GetKeyboardLayout
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES9 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES0 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 1024B - Virtual size: 795B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 606B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ