Static task
static1
Behavioral task
behavioral1
Sample
338892708186ae56d214bd145970b042.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
338892708186ae56d214bd145970b042.dll
Resource
win10v2004-20231215-en
General
-
Target
338892708186ae56d214bd145970b042
-
Size
244KB
-
MD5
338892708186ae56d214bd145970b042
-
SHA1
237fc85fb2c6e19164ff67b4e8f88c63808aa924
-
SHA256
a2e8a37435ccef63070fa929ec3034c3c83b27090557e8d02fc8a845f60237b7
-
SHA512
888c39539cf31f69eccb77bf8d6f3116053c56402e45f56c5aaea149a6f4c67fbf84c940cd4a416685f1525889bece9ab32a086d1d48ab36ec4f24c9abc31f49
-
SSDEEP
6144:dAQLsY0brPGi0QZrz30aNKZd/hq47gUXZ/:dAW0brKQxLZNK/dF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 338892708186ae56d214bd145970b042
Files
-
338892708186ae56d214bd145970b042.dll windows:5 windows x86 arch:x86
55a88d91046e2a4c7872f45f829e51c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
GetScrollPos
CreateIcon
InsertMenuA
CloseWindow
kernel32
lstrlenA
FindClose
FreeResource
GetStdHandle
ExitThread
OpenFile
GetCPInfo
DeleteFileW
FormatMessageA
OpenFileMappingA
GetFileType
GetLocalTime
GetCommandLineA
GetPriorityClass
HeapAlloc
ReadFile
CopyFileExA
CreateDirectoryA
ExitProcess
GetLastError
CopyFileA
WriteFile
lstrcatA
advapi32
RegLoadKeyA
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyA
RegEnumKeyExW
RegGetKeySecurity
RegDeleteValueA
RegDeleteKeyA
Sections
.46ga Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.b055 Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1dfa4 Size: 187KB - Virtual size: 535KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdff Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.g901c Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE