Static task
static1
Behavioral task
behavioral1
Sample
6f6100fb090c0f1065fbba500e55bcd7.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6f6100fb090c0f1065fbba500e55bcd7.dll
Resource
win10v2004-20231222-en
General
-
Target
6f6100fb090c0f1065fbba500e55bcd7
-
Size
197KB
-
MD5
6f6100fb090c0f1065fbba500e55bcd7
-
SHA1
78892de7630a5119e74c1eef50bab2cfeab56b80
-
SHA256
3302d92b26a7ff7e8addc94c4b7cf65040b4b1e899098df8b0f9d0e57fd09275
-
SHA512
83918299811dc62558d81ffb7412a5aec4385cb5bafd7dc8b33f6a3fe14b4d2f0f4522fa8cc06cff455265e54a9a9fa711e6e530685954dc4fda8c7fe80e7f82
-
SSDEEP
3072:VjEjsCmGnY+CWBnebSXvY37vqRDRALjQpGSt4TuXehRZYZUsw7FnQ/TP:uHvNjeb+vY3TqZR8jgeuXehRyzw7NYT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f6100fb090c0f1065fbba500e55bcd7
Files
-
6f6100fb090c0f1065fbba500e55bcd7.dll windows:5 windows x86 arch:x86
f58e36c9dac44c3e7f8dd8000b39456a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcatW
CreateFileW
ExitProcess
GetWindowsDirectoryW
VirtualAlloc
user32
DefFrameProcW
DefWindowProcW
DialogBoxParamW
DrawFocusRect
DrawMenuBar
EnableMenuItem
EndDialog
FrameRect
GetClientRect
GetDC
GetDlgItem
GetDlgItemInt
GetDlgItemTextW
GetKeyState
GetMenu
GetMessageW
GetSubMenu
GetSystemMenu
CreateWindowExW
IsCharAlphaW
IsDlgButtonChecked
LoadAcceleratorsW
LoadCursorW
LoadStringW
MessageBoxW
PostMessageW
PostQuitMessage
ReleaseCapture
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetCapture
SetCursor
SetCursorPos
SetDlgItemTextW
SetFocus
SetWindowLongW
SetWindowsHookExW
TranslateAcceleratorW
TranslateMDISysAccel
UnhookWindowsHookEx
CheckRadioButton
CheckMenuItem
CharUpperBuffW
CallWindowProcW
LoadIconA
GetWindowLongW
comdlg32
PrintDlgW
GetOpenFileNameW
FindTextW
advapi32
RegOpenKeyExW
Sections
.text Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t1 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
t2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ