Static task
static1
Behavioral task
behavioral1
Sample
1c65dc255a1f6559bebe9a80aee48233.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c65dc255a1f6559bebe9a80aee48233.dll
Resource
win10v2004-20231215-en
General
-
Target
1c65dc255a1f6559bebe9a80aee48233
-
Size
308KB
-
MD5
1c65dc255a1f6559bebe9a80aee48233
-
SHA1
da2369d7fc8543f7896b3559ed7f8aa4d6f626be
-
SHA256
863e66b44bb7ae145c290f8aa74d605bf53d9bab1724e949d0ba5af950f50567
-
SHA512
6104f467991f98d103298150bcd57856051dd596152cafd5dc21350be3708f88b84063ca2f1537050a27b15b267f7915b67165792153745e03ce06128b41fefb
-
SSDEEP
6144:FvR/cB3M6BCbSLlwnFOp+ORujy5dY/agazHN:FvR/cB3M6BCbSLGn9lOY/agazH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c65dc255a1f6559bebe9a80aee48233
Files
-
1c65dc255a1f6559bebe9a80aee48233.dll windows:4 windows x86 arch:x86
046f4cf7ff2e14ea685b2c89a2c9169b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
CreateBrushIndirect
user32
SetScrollInfo
comctl32
ImageList_Read
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Write
ImageList_Add
ImageList_Remove
ole32
CreateOleAdviseHolder
CoTaskMemFree
StgOpenStorage
advapi32
RegDeleteValueA
GetLengthSid
RegOpenKeyExA
oleaut32
SysReAllocStringLen
SafeArrayCreate
SafeArrayGetUBound
SysAllocStringLen
VariantCopyInd
SafeArrayUnaccessData
SysFreeString
RegisterTypeLib
kernel32
IsBadHugeReadPtr
ExitThread
LocalAlloc
GetVersionExA
GetProcAddress
VirtualAlloc
IsBadReadPtr
WideCharToMultiByte
VirtualQuery
GetModuleHandleA
GetModuleFileNameA
LoadLibraryExA
VirtualAllocEx
GetCommandLineA
SetEndOfFile
lstrlenW
InitializeCriticalSection
LoadLibraryA
GetLastError
GlobalAlloc
GetACP
ExitProcess
version
GetFileVersionInfoSizeA
Sections
CODE Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rsrc1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rsrc7 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Rsrc3 Size: 1KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rsrc9 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Rsrc6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rsrc0 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 594B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ