Static task
static1
Behavioral task
behavioral1
Sample
191a1e1624e217bed2e90f91e0fbee86.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
191a1e1624e217bed2e90f91e0fbee86.dll
Resource
win10v2004-20231215-en
General
-
Target
191a1e1624e217bed2e90f91e0fbee86
-
Size
28KB
-
MD5
191a1e1624e217bed2e90f91e0fbee86
-
SHA1
cbfa4954177d8dbb062e109bf6d3a8b0c5e5ac1a
-
SHA256
f7f8cafc37e16507c97802de823f63296a6601af8884f47dd4354d649d5809ea
-
SHA512
42e3b1e2e98b4ee378c4895da71f794ff4a68ea4b0a72e6b093d5a06e3b455a7535f6ebe8a5abf02441e6782a5e9c128f298c83d420081161a35c015ac776170
-
SSDEEP
384:HnMiBF9RAqs4KvF9PWaGxymm4saiLOBs4lbF9lJgErQQaRyqHsxTrWyBq+6HcZqI:tvRcFLGxy2u4lbzlLEQats1rbQC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 191a1e1624e217bed2e90f91e0fbee86
Files
-
191a1e1624e217bed2e90f91e0fbee86.dll windows:4 windows x86 arch:x86
288b0ba7d387092525d2fe6176123955
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
FindClose
FindFirstFileA
FreeLibrary
GetFileSize
GetProcAddress
LoadLibraryA
ReadFile
SetEndOfFile
SetFilePointer
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile
user32
EndPaint
ExitWindowsEx
FindWindowExA
GetCapture
GetCursorPos
GetDC
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowDC
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
IsWindow
KillTimer
LoadCursorA
LoadIconA
LoadStringA
MessageBoxA
PeekMessageA
PostMessageA
PostQuitMessage
gdi32
CombineRgn
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateRectRgn
CreateSolidBrush
DeleteDC
StretchBlt
TextOutA
shell32
DllRegisterServer
DragAcceptFiles
DragFinish
DragQueryFile
DragQueryPoint
SHBrowseForFolder
Shell_NotifyIcon
ShellExecuteA
SHGetPathFromIDList
comdlg32
ChooseColorA
ChooseFontA
GetSaveFileNameA
Sections
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CRT Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ