Static task
static1
Behavioral task
behavioral1
Sample
258b00b63f618d0354eab8da870105fd.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
258b00b63f618d0354eab8da870105fd.dll
Resource
win10v2004-20231215-en
General
-
Target
258b00b63f618d0354eab8da870105fd
-
Size
32KB
-
MD5
258b00b63f618d0354eab8da870105fd
-
SHA1
c4ca66fabbf42f738b6123603b4181b47b6cd86d
-
SHA256
98c1d09e59e12d691001de2e0c21d6f94ab60cd0b07db9e676493fde836a3c9b
-
SHA512
f68118e38aeb3493335a51259c2ae52cc95209223ddb8a905604a9ebeaceedbce7ee69d0d9060eb414c283d6e3604d705ae06d033630d789e4ee2ecabf313767
-
SSDEEP
384:H3mjR+Kzy9msKg37eZfOonDAjYJYsWVCW:Huz1sKg37e82AjYJg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 258b00b63f618d0354eab8da870105fd
Files
-
258b00b63f618d0354eab8da870105fd.dll windows:4 windows x86 arch:x86
f18ce7ce8bc8e576d5626af3a9d10a5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
OpenMutexA
GetWindowsDirectoryA
GetUserDefaultLangID
GetSystemDefaultLangID
LocalFree
FormatMessageW
CreateMutexA
CreateProcessA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleFileNameA
CloseHandle
SetEvent
CreateThread
WaitForSingleObject
CreateEventA
GetVersionExA
user32
TrackPopupMenu
SetForegroundWindow
GetSubMenu
LoadMenuA
DestroyMenu
LoadIconA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
UnregisterClassA
DestroyWindow
PostQuitMessage
DefWindowProcA
GetCursorPos
MessageBoxW
PostMessageA
RegisterWindowMessageA
gdi32
GetStockObject
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
shell32
Shell_NotifyIconA
Shell_NotifyIconW
ShellExecuteA
msvcrt
wcscmp
wcsncpy
wcslen
wcscpy
??2@YAPAXI@Z
??3@YAXPAX@Z
_strupr
strstr
free
_initterm
malloc
_adjust_fdiv
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ