Static task
static1
Behavioral task
behavioral1
Sample
2ae044267e1f7c8f462667ef60e0e668.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2ae044267e1f7c8f462667ef60e0e668.dll
Resource
win10v2004-20231215-en
General
-
Target
2ae044267e1f7c8f462667ef60e0e668
-
Size
63KB
-
MD5
2ae044267e1f7c8f462667ef60e0e668
-
SHA1
68256759ac91a50383cec92e1e6fe9f3e009a381
-
SHA256
2998a757f5e2c15a1ed60a552ada0441377b0c6724ddb59e3729f5cb6e5e78fb
-
SHA512
8b7478c612ae326d4e1ac67e22b6aece949acf572200418c135daa73c53e62a737fbebb22019f2615e3963d8bb50d3055533d67a97e756f67ca1c495be6a7220
-
SSDEEP
1536:kZY9KsHzuIf3DUvTFjSyVavgm5CnvIMGn9jq:k+osHz/0tSy+5+IMG9jq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ae044267e1f7c8f462667ef60e0e668
Files
-
2ae044267e1f7c8f462667ef60e0e668.dll windows:4 windows x86 arch:x86
6ff1543d6d95b6dfc2ab26330fa5ba84
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
EmptyClipboard
kernel32
InitializeCriticalSectionAndSpinCount
TlsAlloc
TerminateProcess
LoadLibraryW
HeapSize
HeapFree
WaitForSingleObject
CloseHandle
DeleteCriticalSection
ExitProcess
TlsGetValue
advapi32
RegSetValueExW
RegQueryValueExW
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ