Static task
static1
Behavioral task
behavioral1
Sample
770902044f5f9bec477d9513baf47c8b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
770902044f5f9bec477d9513baf47c8b.dll
Resource
win10v2004-20231215-en
General
-
Target
770902044f5f9bec477d9513baf47c8b
-
Size
90KB
-
MD5
770902044f5f9bec477d9513baf47c8b
-
SHA1
de840f6be4e2b5b9d232fa4e1b9f6c6c47984e32
-
SHA256
77fc294a13382dae21abb5fd699eb6ca6e3c4cf6e54272c6c4c19af4cf854b74
-
SHA512
beac5ec845441303ce614c5d53caaa285ef71fa7c7a796aff59fcb5af825d0c9790a31f6e6eb6095b7789598c4bfc01f9a5567fce864e49dfbbe0ed3bd29c8b4
-
SSDEEP
1536:50ZXkaJuXN26JMkAXi2JAtiS2rhO5BcW0mTOhRkt85yBpwb8hOP69h1wV09yqu:58HiM6vAXi2miS2rhOzTOhGt8swgOP6E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 770902044f5f9bec477d9513baf47c8b
Files
-
770902044f5f9bec477d9513baf47c8b.dll windows:4 windows x86 arch:x86
8bb8bf1493559ea54cd1fe1675d8b370
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ToAscii
ShowWindow
ShowScrollBar
ShowCursor
MessageBoxA
LoadImageA
LoadIconA
LoadAcceleratorsA
GetCursor
FillRect
EmptyClipboard
DrawTextA
DestroyWindow
CreateIconFromResourceEx
CreateDesktopW
CreateCursor
CopyImage
CharPrevA
kernel32
FreeResource
GetSystemTimeAsFileTime
GetSystemTime
GetPrivateProfileStringA
FindResourceA
EnumResourceLanguagesW
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
VirtualFree
UnmapViewOfFile
TlsSetValue
TlsFree
SetEndOfFile
MapViewOfFile
LocalAlloc
CloseHandle
EnterCriticalSection
GetTimeFormatA
oleaut32
SysFreeString
SysStringLen
VarBstrCat
SafeArrayCreate
OleTranslateColor
Sections
.text Size: 17KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ