damlad
Static task
static1
Behavioral task
behavioral1
Sample
459d3fcce2bb8946f4749c874e35e497.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
459d3fcce2bb8946f4749c874e35e497.dll
Resource
win10v2004-20231215-en
General
-
Target
459d3fcce2bb8946f4749c874e35e497
-
Size
15KB
-
MD5
459d3fcce2bb8946f4749c874e35e497
-
SHA1
34c0cf6ad3b1a469d23e59782fd7ae03e89ee446
-
SHA256
15b2c2dd9950785f3da60360a4c7cf768c18fa703554d6e183eb39f93ae49baa
-
SHA512
5bd39c9a4d8968145f7b63617bd6f6bccc149b3394715e0149d0aacd2fd81f9d83befaab58c1ae1d1ee81d36f112845b5562e8a956ba2365f4f24090ccf372ec
-
SSDEEP
192:whrCXC1SAagi96f2JwM2vv3vvv7fWieVlmjFNWBbkXOlOzus58s:by13u96BTvvvvbWimONWBwXO7x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 459d3fcce2bb8946f4749c874e35e497
Files
-
459d3fcce2bb8946f4749c874e35e497.dll windows:4 windows x86 arch:x86
17f89cbac2f1606509852e4fcf7527e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CallWindowProcW
RegisterClassExW
UpdateWindow
TranslateMessage
ShowWindow
SetTimer
SetMenu
wsprintfA
SetClipboardData
PostQuitMessage
OpenClipboard
MessageBoxA
LoadMenuA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
InvalidateRect
GetScrollRange
GetMessageA
GetDlgCtrlID
GetClipboardData
GetClientRect
EnumThreadWindows
EndPaint
EmptyClipboard
DispatchMessageA
DefWindowProcA
CreateWindowExA
CloseClipboard
BeginPaint
kernel32
lstrlenA
lstrcatA
SystemTimeToFileTime
Sleep
RtlMoveMemory
OpenMutexA
LoadLibraryExA
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalAlloc
GetTickCount
GetSystemTime
GetProcessHeaps
GetModuleHandleA
GetCommandLineA
FreeLibraryAndExitThread
FlushViewOfFile
FindNextFileA
ExitThread
ExitProcess
DeviceIoControl
CloseHandle
BeginUpdateResourceA
FindFirstFileA
comctl32
ord17
gdi32
SelectObject
GetObjectA
DeleteDC
CreateCompatibleDC
TextOutA
BitBlt
ws2_32
setsockopt
recv
connect
socket
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ