Static task
static1
Behavioral task
behavioral1
Sample
3b761bff632f09fd83d85d139aab7d0e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b761bff632f09fd83d85d139aab7d0e.dll
Resource
win10v2004-20231215-en
General
-
Target
3b761bff632f09fd83d85d139aab7d0e
-
Size
83KB
-
MD5
3b761bff632f09fd83d85d139aab7d0e
-
SHA1
46504507efb128233781a820c08ab681fedd6fa7
-
SHA256
cb84989e7f2e41ccfe682d8e3926700fed0713ae6d3dff904a523786777778a4
-
SHA512
5e46bcb957cfa66f6452f2394b8a6f49e7b68b663116df6b621896f9d98173481efce6a92d2b63b9ed00e44b3661854c873faae5cbec9db1315293441eb9c413
-
SSDEEP
1536:k/vI1FLboSyo9yZrZVfYyERyzLtnipMrmD/lLq9pqk6wtfy/PZ7s:k/v8o69WrZG0Bni1hEGw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b761bff632f09fd83d85d139aab7d0e
Files
-
3b761bff632f09fd83d85d139aab7d0e.dll windows:4 windows x86 arch:x86
ba9240879042e3e5b118495a26716229
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowCursor
ShowCaret
SetCursor
OffsetRect
MessageBoxIndirectA
LoadCursorFromFileA
LoadAcceleratorsA
FillRect
EndDialog
EmptyClipboard
DrawStateA
DestroyWindow
DestroyCursor
DefDlgProcA
CreateIcon
CreateDialogIndirectParamA
CreateDesktopA
CopyRect
CopyImage
kernel32
GetDateFormatA
GetStartupInfoA
GetFileSize
GetCommandLineA
ExitProcess
EnumResourceNamesA
EnumResourceLanguagesW
LoadLibraryA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
VirtualFree
UnmapViewOfFile
SleepEx
Sleep
ReadFile
OpenFileMappingA
GetVersionExA
oleaut32
OleTranslateColor
RegisterTypeLib
SafeArrayAllocData
SafeArrayAllocDescriptor
SysFreeString
SysReAllocString
GetErrorInfo
Sections
.text Size: 16KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ