Static task
static1
Behavioral task
behavioral1
Sample
19dbfd503162fa2c9d1a1b62d46a7e1d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
19dbfd503162fa2c9d1a1b62d46a7e1d.dll
Resource
win10v2004-20231215-en
General
-
Target
19dbfd503162fa2c9d1a1b62d46a7e1d
-
Size
75KB
-
MD5
19dbfd503162fa2c9d1a1b62d46a7e1d
-
SHA1
b1af6f9fcda9e8f3a5ee79d66d1560c07876f0bb
-
SHA256
6c014c80d1397e66fd5ff3c6d8f153d1eded9212cc2cfb9f8e0168335913d3ec
-
SHA512
b5cbf43d37c933f9aca7a349ba80246086f759ee6eefbf95a138c36bdff1f3f5c762854f14e083434a74905dd6370824cea17a746bd42db5b13e1d02fb3aba67
-
SSDEEP
1536:7hNKDGdqKIoCPFQ6iIPC3c9Je1b28CEVSdwUH:7aoCPFRBPCM3e1e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19dbfd503162fa2c9d1a1b62d46a7e1d
Files
-
19dbfd503162fa2c9d1a1b62d46a7e1d.dll windows:4 windows x86 arch:x86
24e606aba3beb8e6cc01bf1d0d0614c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CloseClipboard
CascadeWindows
CreateDialogParamA
DefWindowProcA
DispatchMessageA
EmptyClipboard
EnableWindow
EnumWindows
ExitWindowsEx
SwapMouseButton
FindWindowA
GetDC
GetDesktopWindow
GetMessageA
GetSystemMetrics
GetWindow
GetWindowTextA
IsWindowVisible
KillTimer
LoadCursorA
LoadIconA
MessageBoxA
IsCharAlphaNumericA
UpdateWindow
TranslateMessage
TileWindows
SystemParametersInfoA
wsprintfA
ShowWindow
SetTimer
SetForegroundWindow
SendMessageA
SendDlgItemMessageA
RegisterClassExA
PostQuitMessage
OpenClipboard
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetModuleFileNameA
GetStdHandle
GetCurrentProcess
TerminateProcess
IsBadCodePtr
VirtualFree
CloseHandle
CreateDirectoryA
CreateFileA
GetStringTypeW
CreateThread
DeleteFileA
ExitProcess
ExitThread
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetComputerNameA
GetDriveTypeA
GetFileSize
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetSystemDirectoryA
GetVolumeInformationA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LocalAlloc
LocalFree
MoveFileA
ReadFile
RemoveDirectoryA
SetFilePointer
SetSystemPowerState
Sleep
TerminateThread
WriteFile
WritePrivateProfileStringA
lstrcatA
lstrcpyA
lstrlenA
lstrcpynA
lstrcmpA
CreateMutexA
SetUnhandledExceptionFilter
HeapFree
RaiseException
RtlUnwind
LoadLibraryA
ws2_32
send
recv
inet_ntoa
htons
gethostname
gethostbyname
connect
closesocket
WSASocketA
socket
WSACleanup
shell32
ShellExecuteA
winmm
mciSendStringA
sndPlaySoundA
advapi32
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
wininet
InternetOpenA
InternetSetFilePointer
InternetCloseHandle
InternetGetConnectedState
InternetOpenUrlA
InternetReadFile
gdi32
BitBlt
GetDeviceCaps
msvcrt
__CxxFrameHandler
strstr
oleaut32
GetErrorInfo
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ