Static task
static1
Behavioral task
behavioral1
Sample
6e7ef60c2da5a5f889495e8d6f5759df.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e7ef60c2da5a5f889495e8d6f5759df.dll
Resource
win10v2004-20231222-en
General
-
Target
6e7ef60c2da5a5f889495e8d6f5759df
-
Size
291KB
-
MD5
6e7ef60c2da5a5f889495e8d6f5759df
-
SHA1
ab82efe57f3b5ddf605b604cc9bb937f88065296
-
SHA256
77eea3aad3d3e2479bf80542295e3a87582b8bbe0744e08546c999e9beb6c61a
-
SHA512
eb407234772d3d97844af9b407acf87757ccbc1b1549524d52fe494e777ba27c7d37aaf84b4809350be9fb718ea089c5b5cd0d3f4e2d2de2b804c8e444eadc75
-
SSDEEP
6144:GA1wTB+aXRAiNsZDXdBqEc4gga0NeYhNuOncD6v5xIQrS31:ql+aBANZDXdBm4VakuOcD6hxIR3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e7ef60c2da5a5f889495e8d6f5759df
Files
-
6e7ef60c2da5a5f889495e8d6f5759df.dll windows:4 windows x86 arch:x86
2b1b6a6c6abe13797b66007cb4f5d8e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleW
LoadLibraryA
GetCommandLineA
GetModuleHandleA
lstrlenW
ExitThread
GetProcAddress
lstrlenA
IsBadReadPtr
ExitProcess
GetVersionExA
VirtualAlloc
GlobalAlloc
gdi32
GetPaletteEntries
GetObjectA
CreateBitmap
GetBitmapBits
GetCurrentPositionEx
GetPixel
GetDIBits
SelectObject
GetDCOrgEx
comctl32
ImageList_Destroy
ImageList_Draw
ImageList_Create
ImageList_Remove
user32
GetWindowLongA
RegisterWindowMessageA
MessageBoxA
GetDlgItem
GetMenu
MsgWaitForMultipleObjects
SetWindowsHookExA
EnableWindow
GetLastActivePopup
IsChild
RedrawWindow
DispatchMessageA
EmptyClipboard
CallWindowProcA
GetCapture
IsZoomed
CharNextA
IsDialogMessageW
RegisterClipboardFormatA
IsDialogMessageA
ShowScrollBar
DrawIcon
GetDesktopWindow
DrawIconEx
GetForegroundWindow
OemToCharA
ShowOwnedPopups
DefFrameProcA
InvalidateRect
ClientToScreen
GetCursorPos
GetSysColor
GetSysColorBrush
GetDC
GetTopWindow
SetRect
PeekMessageW
BeginPaint
CloseClipboard
GetSystemMetrics
CreateWindowExA
GetMenuState
GetMenuItemInfoA
ReleaseDC
SetWindowLongA
RemoveMenu
IsWindowEnabled
GetWindowDC
GetWindowThreadProcessId
GetKeyboardState
SetMenu
GetWindowPlacement
ShowWindow
EnableMenuItem
CharLowerBuffA
GetMenuStringA
SetParent
DefWindowProcA
IsWindowUnicode
InsertMenuItemA
RemovePropA
GetCursor
CheckMenuItem
OpenClipboard
WaitMessage
SetClipboardData
CharUpperBuffA
DrawAnimatedRects
GetKeyState
GetScrollPos
GetKeyNameTextA
GetClassInfoA
version
GetFileVersionInfoA
VerQueryValueA
Sections
CODE Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc5 Size: 1024B - Virtual size: 686B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc9 Size: 1KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc4 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ