Static task
static1
Behavioral task
behavioral1
Sample
1430f82824f8141b451f2c79b5b87f33.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1430f82824f8141b451f2c79b5b87f33.dll
Resource
win10v2004-20231222-en
General
-
Target
1430f82824f8141b451f2c79b5b87f33
-
Size
87KB
-
MD5
1430f82824f8141b451f2c79b5b87f33
-
SHA1
d2dd09dd6bbb8836de2bb6970c85c0f1068d82fc
-
SHA256
951f9eba4f1f637565226e17a0dca677d7b6fba514a16d0215ff1fd4589d46cb
-
SHA512
f0a921b4df68532f1f9a9c3dacb306d35fc3093d65edbdf3f925aa348fc52f518e6a3a3967ccb8498345a6a79b74286fd6eea021ff2e7effc361dbd12c823e18
-
SSDEEP
1536:kWGAuT1YV/hrraJgzT033T+ZqXt8dE9bpE4bR1j9AzPmwWykCbO/baJmeT:zPuyV/JraJgzTI3bPNoOw5yjMmeT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1430f82824f8141b451f2c79b5b87f33
Files
-
1430f82824f8141b451f2c79b5b87f33.dll windows:4 windows x86 arch:x86
86bde9fd72fa7e6f55108dc248d942e9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowOwnedPopups
SetFocus
SetCursor
OemToCharW
LoadMenuA
LoadImageA
GetMessageA
GetCursor
EqualRect
EndDialog
EnableScrollBar
EnableMenuItem
DialogBoxParamA
DestroyMenu
DefDlgProcA
CreateMDIWindowA
CreateDialogParamA
CreateAcceleratorTableA
CharToOemBuffA
CharPrevA
CharLowerA
kernel32
EnumResourceLanguagesW
CompareStringA
GetStartupInfoA
GetSystemTime
OpenFileMappingA
ReadFile
SetLastError
SleepEx
TlsGetValue
UnmapViewOfFile
VirtualAlloc
GetModuleHandleA
oleaut32
OleLoadPicturePath
OleTranslateColor
SafeArrayAllocDescriptor
SafeArrayCreate
SafeArrayDestroy
SetErrorInfo
SysFreeString
SysStringLen
VarBstrCat
VarBstrCmp
OleLoadPicture
Sections
.text Size: 17KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ