Static task
static1
Behavioral task
behavioral1
Sample
4eac6fc23776623ded4a91fd2cd6d570d11c270703fe11ef8852dd8ff30a61f0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4eac6fc23776623ded4a91fd2cd6d570d11c270703fe11ef8852dd8ff30a61f0.dll
Resource
win10-20231215-en
General
-
Target
4eac6fc23776623ded4a91fd2cd6d570d11c270703fe11ef8852dd8ff30a61f0
-
Size
2.0MB
-
MD5
a199819e14ba9ad265e80531b400b6cc
-
SHA1
84d637b69958ed62636593a0e7d9671c6a9c3c45
-
SHA256
4eac6fc23776623ded4a91fd2cd6d570d11c270703fe11ef8852dd8ff30a61f0
-
SHA512
5cac2a9366e502820a240a339985a5e8cfdba6d3430fceb89d862609e79bcf33975166d609e1f9f6c4e8e48a23515782fd3812a6bce5abdd5a5d2eb15ca1aa53
-
SSDEEP
49152:LvfB4U38JL7xiYFE2w2ac6ZoOMcIC7H9QDKqGwUA:7fB8JUYFEz2K+OhzL9QGe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4eac6fc23776623ded4a91fd2cd6d570d11c270703fe11ef8852dd8ff30a61f0
Files
-
4eac6fc23776623ded4a91fd2cd6d570d11c270703fe11ef8852dd8ff30a61f0.dll windows:5 windows x86 arch:x86
c36ddf4395620bdea2714262a8b21362
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comdlg32
PageSetupDlgA
kernel32
GetProcessHeap
LoadLibraryA
LoadLibraryExW
WaitForSingleObjectEx
GetModuleFileNameW
GetBinaryTypeW
QueryPerformanceCounter
FindNextFileA
GetModuleHandleA
oleaut32
SafeArrayCreate
winmm
waveInUnprepareHeader
gdi32
GetMapMode
SetDIBColorTable
user32
CreateDialogParamW
ole32
OleIsCurrentClipboard
winspool.drv
DeletePortW
rpcrt4
UuidEqual
ws2_32
WSAGetLastError
msvcrt
fgets
Sections
.text Size: 568KB - Virtual size: 566KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b=W| Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lny6jo2 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ