arxtti
Static task
static1
Behavioral task
behavioral1
Sample
45fc84bee71322a9b51d33b8558e20ed.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
45fc84bee71322a9b51d33b8558e20ed.dll
Resource
win10v2004-20231215-en
General
-
Target
45fc84bee71322a9b51d33b8558e20ed
-
Size
14KB
-
MD5
45fc84bee71322a9b51d33b8558e20ed
-
SHA1
ee177bcca99f9f80e9d2fba7a77693f79ce05de9
-
SHA256
8f5b8cbb250937508ed80c6dbeaa57d1074dd1b04861b2fabc3bbcf99c5113d9
-
SHA512
b73706ed43fbc4f7235d61ccd8b2db41c31793d9c5884814ae799104a060545be71ab266f3176216de64e6cd64d3d5f949a0a50e3a88486b3cfc04413e9fc671
-
SSDEEP
192:N0Hpco/SGJMsfMFeKd+hACjXnFJLoXzjCIWM+1BvjYMv05k7kMsd8u:aHpF/1JMkMF3dKjQXqIkBtv0k/68
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45fc84bee71322a9b51d33b8558e20ed
Files
-
45fc84bee71322a9b51d33b8558e20ed.dll windows:4 windows x86 arch:x86
b7879572cbcda6711caf622b59a24ef9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CallWindowProcW
SetDlgItemTextW
RegisterClassExW
SetWindowTextA
SendMessageA
SendDlgItemMessageA
PostMessageA
MessageBoxIndirectA
MessageBoxA
LoadIconA
IsDlgButtonChecked
GetWindowTextA
GetSystemMenu
GetMenuStringA
GetDlgItemTextA
EndDialog
DialogBoxParamA
DestroyIcon
AppendMenuA
wsprintfA
kernel32
ExitThread
lstrlenA
lstrcatA
SystemTimeToFileTime
SleepEx
Sleep
SetUnhandledExceptionFilter
RtlMoveMemory
OpenMutexA
LoadLibraryExA
LoadLibraryA
HeapDestroy
GetTickCount
GetSystemTime
GetProcessHeaps
GetModuleHandleA
FlushViewOfFile
FindNextFileA
FindFirstFileA
BeginUpdateResourceA
CloseHandle
DeviceIoControl
ExitProcess
FindClose
gdi32
GetDCBrushColor
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ