Static task
static1
Behavioral task
behavioral1
Sample
62bfeefe51af395c6537b66856b88f6b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
62bfeefe51af395c6537b66856b88f6b.dll
Resource
win10v2004-20231215-en
General
-
Target
62bfeefe51af395c6537b66856b88f6b
-
Size
247KB
-
MD5
62bfeefe51af395c6537b66856b88f6b
-
SHA1
ca995769360ba665f8e4f8d0946958d4a4329173
-
SHA256
75eea41d87ed77344ca175dafd72e3d6206d6ecf13881129944974caf5be229a
-
SHA512
ab14fb90f378b4e9785e9d02364bedb2be17245f1278ce95b381d05dbf9c44a148b18362e11559193c010e59bcfeb8326982fc911d3e6b88da3e42e6fbe701e5
-
SSDEEP
6144:b1At9BrxHS28w6zfENsaSSlip2v2UiSyPR1moAm:b1At95xHZafEyFwv2mwDL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62bfeefe51af395c6537b66856b88f6b
Files
-
62bfeefe51af395c6537b66856b88f6b.dll windows:4 windows x86 arch:x86
fc7ecdc2a0edc76bb750a5da087d073a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
ExitProcess
GetModuleHandleA
lstrlenW
GetOEMCP
LoadLibraryExA
VirtualAlloc
GetCommandLineW
GetACP
LoadLibraryA
ExitThread
IsBadHugeReadPtr
GetProcAddress
comdlg32
FindTextA
GetOpenFileNameA
ChooseColorA
user32
GetWindowPlacement
IsZoomed
GetTopWindow
GetWindowLongW
KillTimer
InsertMenuItemA
GetWindow
IsWindowVisible
IsWindowUnicode
GetSysColorBrush
GetWindowDC
GetWindowLongA
InsertMenuA
IsWindow
IsRectEmpty
GetSubMenu
GetWindowThreadProcessId
IsWindowEnabled
IsIconic
IsDialogMessageA
GetScrollRange
GetWindowRect
GetWindowTextA
IntersectRect
IsChild
InvalidateRect
GetSystemMenu
InflateRect
GetSysColor
IsDialogMessageW
Sections
CODE Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ