Static task
static1
Behavioral task
behavioral1
Sample
3c96acbc6f2f839969e620000847db00.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c96acbc6f2f839969e620000847db00.dll
Resource
win10v2004-20231215-en
General
-
Target
3c96acbc6f2f839969e620000847db00
-
Size
103KB
-
MD5
3c96acbc6f2f839969e620000847db00
-
SHA1
720d17ccd673e604ef66ab8b01edcba30e25f2a2
-
SHA256
aacaa4e4fd3b7d718c6e46356b1f9ace15250bb86039a551262e47b3aa6b13d1
-
SHA512
c285b64d833789e70fb847707260721c1df6912b6ea212a0831d37bacd2ab6fa3e0b0fb3557a4bee4a662c7f645e09374a15d680beddbc8f716b7f4389b39f92
-
SSDEEP
1536:Hu3NdkIsTF4APT5dNCGBsy+tQUaQ5t9k5UHbzAWVkmV0PjrbIkm9BF/+:HaQz/PTlCGBCtCQr9kiHPAArgbIh9BF2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c96acbc6f2f839969e620000847db00
Files
-
3c96acbc6f2f839969e620000847db00.dll windows:4 windows x86 arch:x86
bcd0260bf3001a3a08a350cbb25b0dcf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comctl32
ImageList_GetImageCount
ImageList_Create
ImageList_GetIconSize
ImageList_LoadImage
ImageList_GetDragImage
ImageList_AddMasked
ImageList_BeginDrag
ImageList_AddIcon
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_Copy
ImageList_DragMove
ImageList_Draw
ImageList_DragEnter
ImageList_EndDrag
ImageList_Draw
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_DragLeave
ImageList_Create
InitCommonControls
ImageList_GetIconSize
ImageList_Remove
ImageList_DrawEx
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Copy
ImageList_DrawIndirect
ImageList_LoadImageA
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_GetImageCount
ImageList_LoadImageW
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_Replace
ImageList_DrawIndirect
ImageList_DragEnter
ImageList_DragMove
ImageList_LoadImageA
user32
LoadMenuA
DrawTextW
BlockInput
CreateIcon
GetWindowTextLengthA
DrawIconEx
IsWindow
GetWindowTextA
InsertMenuA
DrawTextA
CopyRect
IsMenu
AlignRects
GetDC
GetCursor
GetDlgItem
EndDialog
AppendMenuW
CreateIcon
IsMenu
GetDC
GetCursor
CalcMenuBar
DialogBoxParamA
DrawTextW
GetMenu
DrawTextW
GetWindowTextLengthA
CopyIcon
GetCursor
CalcMenuBar
IsWindow
EndDialog
GetMenu
DrawTextA
InsertMenuA
DialogBoxParamW
DrawIconEx
CopyImage
GetDC
CloseWindow
CreateIcon
kernel32
ExitThread
DeleteFileA
CopyFileExW
GetComputerNameA
GetCPInfo
OpenFile
CreateProcessA
GetCommandLineA
CopyFileW
WriteFile
ReadConsoleA
GlobalFree
OpenFileMappingA
GetStdHandle
ReadFile
Sleep
GlobalFree
GetCPInfo
CopyFileW
GetCommandLineA
WriteFile
OpenFileMappingA
CopyFileA
FindAtomA
DeleteAtom
CreateThread
SetLastError
GetConsoleMode
ReadFile
GetComputerNameA
GetFileTime
GetFileSize
CreateProcessA
advapi32
RegQueryValueW
RegEnumKeyExA
RegFlushKey
RegOpenKeyExW
RegDeleteValueW
RegReplaceKeyA
RegQueryInfoKeyW
RegLoadKeyA
RegCreateKeyExA
RegEnumValueA
RegEnumValueW
RegOpenKeyExA
RegQueryValueExA
RegQueryInfoKeyA
RegEnumKeyW
RegCreateKeyExW
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 427B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ