StartW
Static task
static1
Behavioral task
behavioral1
Sample
40d45d99bd616f62fb74262309a73b1b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
40d45d99bd616f62fb74262309a73b1b.dll
Resource
win10v2004-20231222-en
General
-
Target
40d45d99bd616f62fb74262309a73b1b
-
Size
23KB
-
MD5
40d45d99bd616f62fb74262309a73b1b
-
SHA1
e3053a0e696217d86af192c4cb75d2f1b10b0239
-
SHA256
16beb11dc8b475d0e15abeb68dfa80a09ae44948a9ca307fb46631140e5d6f96
-
SHA512
089c378c6e2eabcc78607d89fa69ada2931444707769d40dcb791ac22dbe81027d76eda38467b62b6b2d5ee7e33adf069be474f6a68433be7bcec8bdb67319cf
-
SSDEEP
384:QpzoCXsRb/WyeMZM0r2RAWQb7rRcDH7yd8S9oTU7ZMabNDbHbGK1datlJ9:c3Xu/rrr2RAf6id8S9ooNLxdat7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40d45d99bd616f62fb74262309a73b1b
Files
-
40d45d99bd616f62fb74262309a73b1b.dll windows:6 windows x64 arch:x64
dd92932e021c9b9f238b2bd809b4c945
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
GlobalAlloc
WriteFile
GetCommandLineA
HeapFree
Sleep
VirtualAlloc
VirtualProtect
GetFileSize
lstrcmpA
GetSystemTime
CreateMutexA
GetProcessHeap
HeapAlloc
GetLastError
CloseHandle
CreateFileA
user32
ShowWindow
GetKeyboardLayout
ActivateKeyboardLayout
MessageBoxA
FindWindowA
RegisterClassA
gdi32
SetBkMode
CreateFontIndirectA
GetTextExtentPoint32A
SetBkColor
DeleteObject
SetTextColor
comdlg32
GetSaveFileNameA
GetOpenFileNameA
FindTextA
Exports
Exports
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ