Static task
static1
Behavioral task
behavioral1
Sample
383ce4d322f1d577a663cb985737253f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
383ce4d322f1d577a663cb985737253f.dll
Resource
win10v2004-20231215-en
General
-
Target
383ce4d322f1d577a663cb985737253f
-
Size
214KB
-
MD5
383ce4d322f1d577a663cb985737253f
-
SHA1
72ac73ac32f938c6a021030d6a06071afc4a7bb9
-
SHA256
bb81c6f52773e483c57d411f4c5f1ce58e360a459e967042034a2ec15958d1a3
-
SHA512
907567925c957d42c3492e33ba3292a9b47ccc2f42299bdb498935873dd76fedcafe31d02a9e8838304e8604f5daa1a1617e2adb600c1b61c738dc450830b95d
-
SSDEEP
3072:8UFVU77u9x02GFKSTAcV+TJymD8w5GV45mlzQnjbdlRqVtPuph9w8vfZRjrz4Zq8:HS+m97A4+VD5f5ml0ndgPu95pmPgvhkP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 383ce4d322f1d577a663cb985737253f
Files
-
383ce4d322f1d577a663cb985737253f.dll windows:4 windows x86 arch:x86
87d327c84a644605a1330a185f3f4b52
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
GetConsoleCP
GetConsoleOutputCP
GlobalFree
CreateThread
OpenFile
GetCommandLineA
ExitThread
FindAtomA
GetVersion
GetProcessHeap
GetOEMCP
GetCommandLineA
OpenFile
GetConsoleOutputCP
GetConsoleMode
DeleteAtom
GlobalFree
CreateProcessA
GetCPInfo
GetFileSize
GetACP
FindFirstFileA
GetLastError
GetProcessHeap
FreeConsole
GetACP
GetConsoleOutputCP
CreateThread
GetCommandLineA
GetOEMCP
FindFirstFileA
GetProcessHeap
GetComputerNameA
GetCommandLineA
OpenFile
DeleteFileW
GetLastError
DeleteAtom
Sleep
FindAtomA
CreateProcessA
GetComputerNameA
GlobalFree
GetOEMCP
DeleteFileW
Sleep
GetACP
DeleteFileA
FindFirstFileA
GetConsoleMode
GetLastError
GetLastError
GetFileTime
CreateThread
GetConsoleCP
OpenFile
GetStdHandle
GetACP
Sleep
GetLastError
CreateThread
ExitThread
GetOEMCP
GetProcessHeap
ExitProcess
GetCommandLineA
DeleteFileW
user32
BlockInput
DialogBoxParamW
CopyRect
IsMenu
CloseWindow
GetDlgItem
DialogBoxParamA
AppendMenuW
GetMenu
AlignRects
DrawTextW
GetWindowTextA
DrawIconEx
LoadCursorA
GetCursor
AppendMenuA
CalcMenuBar
LoadMenuA
IsMenu
CloseWindow
CopyIcon
GetWindowTextLengthA
IsWindow
AppendMenuW
EndDialog
DrawTextA
DrawIcon
GetDC
CreateIcon
LoadMenuA
DrawIconEx
GetMenu
InsertMenuA
DialogBoxParamA
GetCursor
GetDlgItem
BlockInput
GetWindowTextA
GetMenu
GetDlgItem
DrawIconEx
CopyIcon
CloseWindow
IsMenu
DrawIcon
DialogBoxParamW
DrawTextW
DialogBoxParamA
CalcMenuBar
EndDialog
CreateIcon
LoadCursorA
AppendMenuA
BlockInput
GetFocus
IsWindow
advapi32
RegQueryValueW
RegEnumKeyExA
RegQueryValueExW
RegCreateKeyExW
RegReplaceKeyA
RegFlushKey
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueA
RegCreateKeyExA
RegQueryInfoKeyW
RegDeleteValueW
RegEnumKeyA
RegQueryInfoKeyA
RegGetKeySecurity
RegEnumKeyW
RegLoadKeyW
RegDeleteValueA
RegQueryValueExW
RegQueryValueA
RegDeleteKeyA
RegQueryValueExA
RegQueryValueW
RegCreateKeyExA
RegEnumValueW
RegCreateKeyExW
RegDeleteValueW
RegLoadKeyW
RegQueryInfoKeyA
RegFlushKey
RegReplaceKeyW
RegEnumKeyExW
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 174KB - Virtual size: 522KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 189B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ