Static task
static1
Behavioral task
behavioral1
Sample
58c0327813aa8cf14e23df83e4bfbc94.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
58c0327813aa8cf14e23df83e4bfbc94.dll
Resource
win10v2004-20231215-en
General
-
Target
58c0327813aa8cf14e23df83e4bfbc94
-
Size
5KB
-
MD5
58c0327813aa8cf14e23df83e4bfbc94
-
SHA1
008681dbabcde338d4aa074697a3e6538e0f3bfc
-
SHA256
9d7cabf4fd39624b50a9bc3eb1d00b62854dd10bdceee85b7d5f297dd5d49ab9
-
SHA512
a2412d8985c59ecc9b47fbd12fce50fcb6b3a83852bef12d642c052ee3d83e0ff53b122c31334918aab97b70d4563f0b19b0e7fe8dc32ccec0401c8e51a521d2
-
SSDEEP
96:6NvIjnkepiDZVqDffzhXmPXM39sA/LuaDWAo:6NvpepiDZ8DnzhXmPXG6suaDW/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58c0327813aa8cf14e23df83e4bfbc94
Files
-
58c0327813aa8cf14e23df83e4bfbc94.dll windows:4 windows x86 arch:x86
81464882083ee40ed83d60764a8102dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalUnlock
GlobalLock
CloseHandle
GetModuleFileNameA
GetLocalTime
WriteFile
SetFilePointer
CreateFileA
GetSystemDirectoryA
user32
CloseClipboard
wsprintfA
GetClipboardData
OpenClipboard
GetActiveWindow
GetWindowTextA
ToAscii
GetKeyboardState
GetKeyState
CallNextHookEx
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 246B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ