Static task
static1
Behavioral task
behavioral1
Sample
a018d1855015e0e2b2fb3caf93274a9090ad1ff0ed358ce99a61fcecf708f33f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a018d1855015e0e2b2fb3caf93274a9090ad1ff0ed358ce99a61fcecf708f33f.dll
Resource
win10-20231215-en
General
-
Target
a018d1855015e0e2b2fb3caf93274a9090ad1ff0ed358ce99a61fcecf708f33f
-
Size
2.4MB
-
MD5
0776440319a6a8bcaa1abb698a29f6d8
-
SHA1
2a88892e4b269304fd8b5691b82042d6da4a6202
-
SHA256
a018d1855015e0e2b2fb3caf93274a9090ad1ff0ed358ce99a61fcecf708f33f
-
SHA512
cdb1b79f26bc9b7c56dd2c6d704aea241010cb663510560c95a4d180d9cdad6f72f43b31ff29bac049f600b86e5cc73abe37e352f0be420c18f39d5e8aced78c
-
SSDEEP
49152:fZVaoXPXhz5Kux8eklz6oVV+up9F3SNlB5LtOmS3BAh2VK5KvWd:f3aofxz5KuOeYD+ubQXB5LtOf85Kvi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a018d1855015e0e2b2fb3caf93274a9090ad1ff0ed358ce99a61fcecf708f33f
Files
-
a018d1855015e0e2b2fb3caf93274a9090ad1ff0ed358ce99a61fcecf708f33f.dll windows:5 windows x86 arch:x86
8c5eb0dee4cd1d3f02683279520a3501
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
oleaut32
SafeArrayCreate
winspool.drv
GetJobW
lz32
LZOpenFileA
shlwapi
ChrCmpIA
StrSpnA
rpcrt4
RpcBindingSetAuthInfoA
ws2_32
select
winmm
waveInStart
msvcrt
fgets
kernel32
GetBinaryTypeA
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
WaitForSingleObjectEx
SetConsoleWindowInfo
GetProcessHeap
gdi32
GetEnhMetaFileW
ole32
IsAccelerator
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CMChn Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lny6jo2 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ