Static task
static1
Behavioral task
behavioral1
Sample
1e5972e04661692eff0a949088d8b3ae.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e5972e04661692eff0a949088d8b3ae.dll
Resource
win10v2004-20231222-en
General
-
Target
1e5972e04661692eff0a949088d8b3ae
-
Size
38KB
-
MD5
1e5972e04661692eff0a949088d8b3ae
-
SHA1
7a91d4b4c189592d0a72a700ac2345a8a8dbe748
-
SHA256
e852e3e5de983b667b2d3e2985cdd65dfe48a691ae4585298305a24e73259338
-
SHA512
d294ff5c4de7d375e46e27366383acb33a483c7e9f2bfd28a71d7218fe9b1119b4b220d59dae7a2d8f99f63b47276bea0fa2178956b735274a5eebd56ff5fa18
-
SSDEEP
768:0GBGgBr4pNSkroOo0fSpe3GpeI3xBjyYSDv5/Dxk39tWvPiHq:0kGgh4pNSkjKJYvtCNto5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e5972e04661692eff0a949088d8b3ae
Files
-
1e5972e04661692eff0a949088d8b3ae.dll windows:4 windows x86 arch:x86
ec34b14ae2e730f8d84cc7d960dc886d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowScrollBar
SetMenuInfo
SetCursor
RegisterClassA
OffsetRect
LoadImageA
IsCharLowerA
GetWindowTextA
GetMessageA
EnableMenuItem
DrawTextA
DrawStateA
DestroyCursor
CreatePopupMenu
CreateDesktopW
CreateDesktopA
CreateCursor
CopyRect
CloseWindow
kernel32
FlushFileBuffers
FreeResource
GetCommandLineA
GetLastError
GetLocalTime
GetModuleHandleA
InitializeCriticalSection
RtlUnwind
lstrcpynA
lstrcpyA
lstrcmpA
Sleep
CloseHandle
oleaut32
RevokeActiveObject
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCreate
SysReAllocString
RegisterTypeLib
OleLoadPicture
Sections
.text Size: 17KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ