Static task
static1
Behavioral task
behavioral1
Sample
49f2979cbccd2b8062aee88709b5ab59.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49f2979cbccd2b8062aee88709b5ab59.dll
Resource
win10v2004-20231215-en
General
-
Target
49f2979cbccd2b8062aee88709b5ab59
-
Size
86KB
-
MD5
49f2979cbccd2b8062aee88709b5ab59
-
SHA1
eb5bf3555981b3ffad030ec80f340cf07960da5f
-
SHA256
00f6abcebd326648838048321740d98ffd339f94fadc52b7411f73cb473af952
-
SHA512
116743e1b4420261107a2628ed614dcead655a4442ad197b57cb8bc80238874761ba4f587319f757fc0c7f8987c39e1a8c129c7aad38f1549cf2b52e2cb56456
-
SSDEEP
1536:TPrb8gOQtZkuBz09YpKjGyvqGLAtdBs2rr71m37C7PoR+DdO/IoBOBmC2:AgJGe11GLYdbrFEI6VwosBN2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49f2979cbccd2b8062aee88709b5ab59
Files
-
49f2979cbccd2b8062aee88709b5ab59.dll windows:4 windows x86 arch:x86
e383d294823b1b0c609f59520d7dbfe5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateMutexA
GetCommandLineA
GetCurrentThread
GetDateFormatA
GetLastError
GetStdHandle
GetVersion
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
LocalFree
MoveFileA
SystemTimeToFileTime
VirtualQuery
lstrcmpA
user32
wsprintfA
DispatchMessageA
GetClassLongA
GetDesktopWindow
GetKeyState
GetScrollPos
GetSysColorBrush
InvalidateRect
IsDialogMessageA
LoadIconA
MessageBoxA
ModifyMenuA
ReleaseCapture
SetActiveWindow
ShowWindow
SystemParametersInfoA
UnregisterClassA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 905B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ