Static task
static1
Behavioral task
behavioral1
Sample
39fdcd8b8594e0802851384520232bbc.dll
Resource
win7-20231215-en
General
-
Target
39fdcd8b8594e0802851384520232bbc
-
Size
569KB
-
MD5
39fdcd8b8594e0802851384520232bbc
-
SHA1
cf827099b4a34fae8125eceb0fb3f10f3e186c2d
-
SHA256
308b0f5dd001cf3f8a44ccf1aa666ae40a771eae5d2d4ec1a16fc88f2201dc32
-
SHA512
8d0d9133521c7f736a56e2e31856b3e89163afa5e460cb5f46edddbedcf4c39a582b4055440173339bc4ccaca7d5b2cecd7a036f87639d65c4cf80f78e0771bd
-
SSDEEP
6144:g/JffzAu5ABXV93xkF2p/pzTa7AylqQnmlLAcEVdcsvj8Fb2VnwKK:wLAR3xtTa9mlKcsmbT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39fdcd8b8594e0802851384520232bbc
Files
-
39fdcd8b8594e0802851384520232bbc.dll windows:4 windows x86 arch:x86
3b55ca563269a7f9dfbe8daa455f9f1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpynA
lstrcatA
lstrcpyA
GetWindowsDirectoryA
RemoveDirectoryA
MoveFileA
DeleteFileA
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
GetVersionExA
lstrcmpiA
lstrlenA
CreateFileA
CloseHandle
GlobalAlloc
Sleep
MoveFileExA
GetLastError
GetFileType
GetStdHandle
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GlobalFree
ReadFile
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
AllocConsole
FlushConsoleInputBuffer
Process32FirstW
FillConsoleOutputAttribute
SetProcessPriorityBoost
SetCommMask
CreateTimerQueueTimer
GetCurrentDirectoryW
GetConsoleAliasesLengthW
LoadModule
lstrcmp
GetTempPathA
EnumSystemCodePagesA
_lwrite
FindNextFileW
BuildCommDCBAndTimeoutsA
GlobalMemoryStatus
ResumeThread
DuplicateHandle
SetComputerNameA
GetSystemDefaultLCID
DeleteFiber
CancelDeviceWakeupRequest
Module32Next
EnumDateFormatsExW
WritePrivateProfileStructW
lstrcat
ReadFileEx
FindFirstVolumeA
QueueUserWorkItem
GetSystemTimeAsFileTime
GetSystemInfo
GetLocalTime
lstrcpynW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetProcessTimes
Process32NextW
CreateToolhelp32Snapshot
lstrcmpW
OpenProcess
QueryDosDeviceW
GetLogicalDriveStringsW
AreFileApisANSI
GetTickCount
FindClose
FindFirstFileW
Thread32Next
OpenThread
Thread32First
CreateProcessW
GetExitCodeProcess
CopyFileW
ReadProcessMemory
RemoveDirectoryW
SetFileAttributesW
InterlockedCompareExchange
CreateMutexW
SystemTimeToFileTime
GetTimeZoneInformation
GetFileAttributesW
MoveFileW
MoveFileExW
SetEnvironmentVariableW
GetWindowsDirectoryW
WritePrivateProfileSectionW
GetDriveTypeW
Module32NextW
Module32FirstW
GetPrivateProfileIntW
ExpandEnvironmentStringsW
GetCommandLineW
GetDiskFreeSpaceExW
DeviceIoControl
CreateRemoteThread
VerifyVersionInfoW
VerSetConditionMask
FileTimeToDosDateTime
GetSystemTime
GetFileInformationByHandle
MapViewOfFile
CreateFileMappingW
lstrlenW
UnmapViewOfFile
InterlockedIncrement
GlobalLock
LoadLibraryExW
GlobalUnlock
LeaveCriticalSection
EnterCriticalSection
CreateMutexA
ReleaseMutex
GetModuleFileNameW
FlushInstructionCache
DeleteAtom
FindAtomW
AddAtomW
GetAtomNameW
FormatMessageW
OutputDebugStringW
GetFileSizeEx
SetFilePointerEx
LocalFileTimeToFileTime
lstrcmpA
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
SetConsoleCtrlHandler
QueryPerformanceCounter
FatalAppExitA
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetStartupInfoW
VirtualQuery
VirtualProtect
CreateThread
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
GetLongPathNameW
FreeConsole
GetFileAttributesExW
WritePrivateProfileStringW
GetTempPathW
GetTempFileNameW
CreateFileW
GetFileSize
SuspendThread
InterlockedExchange
TerminateThread
DeleteFileW
CreateDirectoryW
GetCurrentProcessId
ProcessIdToSessionId
FreeLibrary
lstrcmpiW
InitializeCriticalSection
DeleteCriticalSection
SetLastError
GetCurrentThreadId
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
RaiseException
GetModuleHandleW
InterlockedDecrement
MulDiv
LoadLibraryW
SetCurrentDirectoryW
GetPrivateProfileStringW
GetUserDefaultUILanguage
IsProcessorFeaturePresent
GetProcessHeap
HeapSize
GetExitCodeThread
GetComputerNameW
WTSGetActiveConsoleSessionId
GetSystemDirectoryW
GetSystemDefaultUILanguage
LocalFree
OpenMutexW
GetVersionExW
VirtualAllocEx
SetErrorMode
user32
wsprintfA
GetKeyboardLayoutNameW
DialogBoxIndirectParamW
MessageBoxExA
MonitorFromWindow
DrawTextExW
ValidateRect
DdeUninitialize
DdeQueryStringA
SendNotifyMessageW
SetWinEventHook
EnumDisplayDevicesA
EnumDisplaySettingsExW
GetAsyncKeyState
WINNLSGetEnableStatus
GetIconInfo
SetDlgItemTextW
ShowWindow
SendMessageA
SystemParametersInfoA
DispatchMessageW
LoadMenuW
GetMenuItemRect
UpdateLayeredWindow
ShowWindowAsync
GetMenuDefaultItem
RemoveMenu
GetKeyboardLayout
PostMessageW
ReleaseDC
GetDC
SendMessageTimeoutW
FindWindowW
DefWindowProcW
CreateWindowExW
TranslateMessage
GetMessageW
PeekMessageW
DestroyWindow
SetWindowLongW
UnregisterClassA
EnumWindows
LoadStringW
GetClipboardData
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
MonitorFromRect
GetClassInfoExW
LoadCursorW
RegisterClassExW
CharNextW
GetWindowRect
GetParent
GetClientRect
SetWindowPos
RegisterWindowMessageW
LoadImageW
GetSystemMetrics
PostQuitMessage
IsWindow
GetActiveWindow
PtInRect
SetForegroundWindow
keybd_event
GetKeyboardState
SetFocus
SetActiveWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
AllowSetForegroundWindow
SendMessageW
CopyRect
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
SetTimer
KillTimer
IsDialogMessageW
MapWindowPoints
GetMonitorInfoW
GetWindowLongW
GetWindow
CallWindowProcW
EnableWindow
GetDesktopWindow
SetCursor
SetRect
OffsetRect
ScreenToClient
GetMessagePos
IsWindowVisible
SetClassLongW
GetClassLongW
InvalidateRect
DrawTextW
IsRectEmpty
SetRectEmpty
InflateRect
CharLowerBuffW
WaitForInputIdle
WindowFromPoint
SystemParametersInfoW
EnumThreadWindows
SwitchToThisWindow
BringWindowToTop
GetWindowDC
IsCharUpperA
GetCursor
CharLowerW
GetKeyboardType
IsCharLowerW
IsCharAlphaA
IsCharAlphaNumericA
GetClipboardViewer
GetKBCodePage
CloseWindowStation
CharUpperW
LoadCursorFromFileA
GetInputState
gdi32
PolylineTo
XLATEOBJ_cGetPalette
GetTextCharsetInfo
CreateColorSpaceW
CreateSolidBrush
GetHFONT
GdiEndPageEMF
GetWindowOrgEx
SetBoundsRect
SetPolyFillMode
RemoveFontResourceExW
PolyTextOutW
SetRelAbs
HT_Get8BPPMaskPalette
CreateBrushIndirect
EngCreatePalette
GetGlyphIndicesA
PolyDraw
GetPolyFillMode
GetEnhMetaFileW
CreateDCW
GdiSetServerAttr
GetObjectW
GdiArtificialDecrementDriver
GetMetaRgn
GdiEntry7
EngAlphaBlend
SetTextColor
GetTextExtentPointI
CopyEnhMetaFileW
FontIsLinked
SetPixelFormat
AddFontResourceTracking
GetROP2
StrokePath
QueryFontAssocStatus
ArcTo
SetTextAlign
EnumFontFamiliesExW
GetTextFaceA
OffsetViewportOrgEx
CopyMetaFileW
GetWinMetaFileBits
CreateFontIndirectW
SetViewportOrgEx
BitBlt
GetStockObject
GetTextMetricsW
GetObjectA
CreateFontW
SetDIBColorTable
CreateDIBSection
GetTextExtentPoint32W
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetStretchBltMode
StretchBlt
DeleteDC
GetDeviceCaps
DeleteObject
SaveDC
AbortPath
GdiFlush
GetTextCharacterExtra
CreateHalftonePalette
GdiGetBatchLimit
GetColorSpace
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA
GetTokenInformation
AllocateAndInitializeSid
IsValidSid
EqualSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
AdjustTokenPrivileges
RegQueryValueExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
LookupAccountSidW
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
GetLengthSid
CreateProcessAsUserW
RegEnumKeyExA
RegOpenKeyA
shell32
SHGetDiskFreeSpaceExW
SHBrowseForFolder
ShellExecuteEx
SHAddToRecentDocs
ExtractIconA
SHGetMalloc
SHGetFolderPathW
ShellAboutW
Shell_NotifyIconW
ShellExecuteW
SHQueryRecycleBinW
SHGetSpecialFolderPathW
SHGetInstanceExplorer
SHGetPathFromIDList
SHChangeNotify
ShellExecuteExW
CommandLineToArgvW
ole32
CoInitialize
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CreateStreamOnHGlobal
CoUninitialize
shlwapi
SHDeleteKeyA
StrCmpNW
StrStrW
StrRChrIA
SHSetValueW
SHDeleteValueW
SHDeleteKeyW
StrStrIW
ColorRGBToHLS
StrCmpNIW
wnsprintfW
PathRemoveExtensionW
PathFileExistsW
SHGetValueA
StrToIntExW
PathCompactPathW
PathFindFileNameW
PathAppendW
PathFindExtensionW
StrCmpIW
ColorHLSToRGB
PathCombineW
SHGetValueW
PathAddBackslashW
PathRemoveFileSpecW
SHSetValueA
comctl32
InitCommonControlsEx
Sections
.text Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata8 Size: 374KB - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ