Static task
static1
Behavioral task
behavioral1
Sample
54f20023a14dcf3669ce1b09946be07a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54f20023a14dcf3669ce1b09946be07a.dll
Resource
win10v2004-20231215-en
General
-
Target
54f20023a14dcf3669ce1b09946be07a
-
Size
88KB
-
MD5
54f20023a14dcf3669ce1b09946be07a
-
SHA1
25fc4c24c06165fa8d1d049cf5c2d798d7186835
-
SHA256
cab1e477e88f64780789c1f65760bb14d544695a7e7eabc51b0e8e7705a0f6f6
-
SHA512
293bcdb3f5efa69605d148e9dd4d8373d3eee152c30931b79e9a782712a4fafbe34f238e2c8f1355628a2a9ab8c64cf63dafb602a48d986ae8e3e733e00b4910
-
SSDEEP
1536:gk7ZdQ+qYl/dasKoCZ/Nj1MUAKxhQpl2EFxDFbPjK4AnEpfGqkTkKSsZbu0nqNo0:5+y/dkoCZ/cKxCTlhPjK4UE0Sybu0qK0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54f20023a14dcf3669ce1b09946be07a
Files
-
54f20023a14dcf3669ce1b09946be07a.dll windows:4 windows x86 arch:x86
95473e72b9a34e628f731d2c7ab8d7ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DrawStateA
DispatchMessageA
DestroyWindow
DestroyIcon
DeleteMenu
CreateMDIWindowA
CreateIconFromResourceEx
CreateIcon
CreateDialogIndirectParamA
CreateAcceleratorTableA
CopyRect
CloseWindow
CharUpperA
CharToOemBuffA
CharToOemA
CharPrevA
ActivateKeyboardLayout
kernel32
EnumResourceLanguagesA
lstrcpynA
lstrcmpiA
lstrcatA
VirtualFree
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
SetLastError
RtlUnwind
OpenFileMappingA
OpenFile
GetSystemTimeAsFileTime
GetModuleHandleA
GetLocalTime
GetFileSize
FlushFileBuffers
Sections
.text Size: 21KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ