Static task
static1
Behavioral task
behavioral1
Sample
77db027e8fb7a1e3ad27311ac5b30801.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
77db027e8fb7a1e3ad27311ac5b30801.dll
Resource
win10v2004-20231222-en
General
-
Target
77db027e8fb7a1e3ad27311ac5b30801
-
Size
158KB
-
MD5
77db027e8fb7a1e3ad27311ac5b30801
-
SHA1
5375c2ba9f9f1f17b90a7f10991a32117afc14cb
-
SHA256
47ae71ace621cc3b9f221b3bcc9bf6a36341c48adda2c019b59c1e890c1b97b0
-
SHA512
077c536c147f7b9f93f763c89f5b3e7aa6b50ff5dc3542583b6796cd1a9b831c79288a988f84c8bac56f0823ff320a18a8580b807ca57b8b2b71637e21ad7e64
-
SSDEEP
3072:ChYp1FkbBkw0WEBenWofkDtL+wRz7qZ1UoPIn1R9FztySZv:Cepsb/0WEEWCsiwRO1UV1R9Fztj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77db027e8fb7a1e3ad27311ac5b30801
Files
-
77db027e8fb7a1e3ad27311ac5b30801.dll windows:5 windows x86 arch:x86
45ad0241a727f07a0fd9ff6ece7d05b8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
VirtualAlloc
gdi32
CreateCompatibleDC
CreateFontIndirectW
CreatePen
CreatePolygonRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
EnableEUDC
EnumFontFamiliesW
ExtTextOutA
ExtTextOutW
FillRgn
GetBitmapBits
CreateCompatibleBitmap
GetObjectW
GetRgnBox
GetStockObject
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
OffsetRgn
CreateBitmap
Rectangle
SelectObject
SetBitmapBits
SetBkColor
SetTextColor
StretchBlt
TranslateCharsetInfo
BitBlt
GetFontData
PatBlt
comdlg32
ChooseFontW
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegOpenKeyW
shell32
ShellAboutW
imm32
ImmSetConversionStatus
ImmSetCompositionStringW
ImmRegisterWordW
ImmIsIME
ImmAssociateContext
ImmConfigureIMEW
ImmCreateContext
ImmDestroyContext
ImmEnumRegisterWordW
ImmEscapeW
ImmGetCompositionStringW
ImmGetConversionStatus
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444445 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444444 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 726B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ