Static task
static1
Behavioral task
behavioral1
Sample
37d2ba14f09b7cee864609ddd6d0cff0.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
37d2ba14f09b7cee864609ddd6d0cff0.dll
Resource
win10v2004-20231222-en
General
-
Target
37d2ba14f09b7cee864609ddd6d0cff0
-
Size
135KB
-
MD5
37d2ba14f09b7cee864609ddd6d0cff0
-
SHA1
c72b2464c688b0a8bb1c42790efcb6a992dbfce7
-
SHA256
6e91c16d4b617888e52c2ef4c61de031f89a5c98e62f519d885256884489a767
-
SHA512
c6da21b541796830fdef509c1a61885d40d5e25613d8d197be927f02d55225bfb0dad921cb3ee7856d12bfe5822a7e9787eca5ee867f2bdd7d7d207849388ad5
-
SSDEEP
1536:nuSM379pilzy4aCUBGbrufhif3ba/Qtps4zWeYXuOtMlZ:nu79WdaC2urufq33UeYuOU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37d2ba14f09b7cee864609ddd6d0cff0
Files
-
37d2ba14f09b7cee864609ddd6d0cff0.dll windows:4 windows x86 arch:x86
3034835fedd595bcace2da5a44eb7d25
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CopyFileW
DeleteFileA
GetFileTime
FindAtomA
OpenFile
CopyFileA
ReadConsoleA
CreateProcessA
GetLastError
CopyFileExW
WriteFile
GlobalFree
GetStdHandle
CreateThread
GetCommandLineA
CopyFileA
GetComputerNameA
WriteFile
GetCPInfo
FindFirstFileA
ReadConsoleA
GetFileSize
OpenFile
GetStdHandle
OpenFileMappingA
ReadFile
DeleteFileA
GetConsoleMode
FindAtomA
DeleteFileW
DeleteAtom
DeleteFileA
CopyFileA
GetComputerNameA
GetFileTime
ReadConsoleA
CopyFileExA
CopyFileW
GetCommandLineA
ExitThread
OpenFileMappingA
FindAtomA
user32
CalcMenuBar
DialogBoxParamW
CloseWindow
GetCursor
DrawTextA
GetDC
AlignRects
CopyImage
InsertMenuA
GetWindowTextLengthA
DrawTextW
CopyImage
AlignRects
GetMenu
DrawIcon
BlockInput
CopyRect
GetDlgItem
GetFocus
AppendMenuW
IsWindow
GetWindowTextLengthA
CalcMenuBar
EndDialog
CopyIcon
AppendMenuA
gdi32
DeleteDC
AbortPath
AddFontResourceW
SetTextColor
DeleteObject
AddFontResourceA
RestoreDC
AddFontResourceExA
AddFontResourceExW
ClearBitmapAttributes
GetBitmapBits
GetPixel
GetPixel
AddFontMemResourceEx
GetBrushOrgEx
BeginPath
GetBrushOrgEx
CreateSolidBrush
SetTextColor
AddFontResourceA
AddFontResourceExW
CancelDC
DeleteObject
AddFontResourceW
GetClipBox
ClearBrushAttributes
AddFontMemResourceEx
ExcludeClipRect
CloseFigure
GetBitmapBits
GetCurrentPositionEx
ClearBitmapAttributes
AddFontResourceExA
GetBrushOrgEx
ExtTextOutA
CloseFigure
CreateSolidBrush
GetPixel
BeginPath
AddFontMemResourceEx
ClearBitmapAttributes
AbortPath
ExtTextOutA
GetPixel
AddFontResourceW
GetClipBox
RestoreDC
GetBitmapBits
BeginPath
AddFontResourceExA
GetPixel
ClearBrushAttributes
SetTextColor
AddFontResourceExW
AddFontResourceTracking
GetBrushOrgEx
AddFontMemResourceEx
DeleteDC
CreateSolidBrush
AddFontResourceA
AbortPath
comctl32
ImageList_Read
ImageList_DragMove
ImageList_Destroy
ImageList_GetIconSize
ImageList_DragEnter
ImageList_DragShowNolock
InitCommonControls
ImageList_AddIcon
ImageList_GetImageCount
ImageList_Replace
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_GetImageRect
ImageList_LoadImage
InitCommonControls
ImageList_DrawIndirect
ImageList_Remove
ImageList_EndDrag
ImageList_Destroy
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 393B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 197B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ