?VirtualDataRes
Static task
static1
Behavioral task
behavioral1
Sample
f863608a8b149948c107ed78ddee37b3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f863608a8b149948c107ed78ddee37b3.dll
Resource
win10v2004-20231222-en
General
-
Target
f863608a8b149948c107ed78ddee37b3
-
Size
56KB
-
MD5
f863608a8b149948c107ed78ddee37b3
-
SHA1
c87003987bcc64dd4bb332a821512f3e7c000fca
-
SHA256
4981de72d8ae23a32096c428bbe2a2057a375afacf2bf7d0c1cd4de19eebec46
-
SHA512
0f2f097eead3d641d7908db18a9058903ed77581eb6b2d627b2ce4f96f399f9c8701c923c47d4f40ef607600d81fd571e6df70587985a737a0fde401ffb32992
-
SSDEEP
1536:ztuCN4KaSefaSxKYuyKClrSxBtUb+9LRzDq:hFUSAxzhKQCSStn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f863608a8b149948c107ed78ddee37b3
Files
-
f863608a8b149948c107ed78ddee37b3.dll windows:5 windows x86 arch:x86
1d2eb3167f5677ac574cab6cde64d666
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ChildWindowFromPointEx
AllowSetForegroundWindow
GetWindow
DialogBoxIndirectParamW
GetDialogBaseUnits
SetWindowLongA
GetForegroundWindow
DrawFrameControl
FindWindowA
CheckMenuRadioItem
FindWindowW
AppendMenuA
PostMessageA
GetActiveWindow
GetMenuItemRect
GetTopWindow
CallWindowProcA
GetMenuState
kernel32
CreateSemaphoreA
LocalAlloc
lstrcmpiA
GetFileSize
DefineDosDeviceW
SetLastError
LoadLibraryA
EscapeCommFunction
Exports
Exports
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfhgfh Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfhf Size: 512B - Virtual size: 109B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uiyytg Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bgv Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iuouyt Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ