wndplt
Static task
static1
Behavioral task
behavioral1
Sample
4d3ee5b9c7d3ea223b2e159d14ad4b44.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d3ee5b9c7d3ea223b2e159d14ad4b44.dll
Resource
win10v2004-20231215-en
General
-
Target
4d3ee5b9c7d3ea223b2e159d14ad4b44
-
Size
12KB
-
MD5
4d3ee5b9c7d3ea223b2e159d14ad4b44
-
SHA1
a655e8cfbf80c2bdf0906aca8faf30b2e614472b
-
SHA256
d7d41dc41c7a858904257add7847512719261cfa01f7e803ee48b8b81699605e
-
SHA512
2c661948fb1a8340b2909b1f3d46a1a174311c6a2291dad83e57eb82d69ba2c3201a8ca207f71ca5408324ffb2bf6cbe67aaac2ad78263e041edf63ca7d95dfa
-
SSDEEP
192:O6e6vzFR9gQMv/lUnuOfj1AX3RajSc/Ic9kuL7IHYd7i:s6vprKXiuSja1cgcmbEi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d3ee5b9c7d3ea223b2e159d14ad4b44
Files
-
4d3ee5b9c7d3ea223b2e159d14ad4b44.dll windows:4 windows x86 arch:x86
3edf6dc606e7ee5cd8555e4d7535f81a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ReplyMessage
CallWindowProcW
wsprintfA
GetInputDesktop
GetAltTabInfoA
AnimateWindow
RegisterClassExW
kernel32
lstrlenA
CloseHandle
ExitProcess
ExitThread
FlushViewOfFile
GetProcessHeaps
GetSystemTime
GetTickCount
LoadLibraryA
LoadLibraryExA
OpenFile
lstrcmpiA
RtlMoveMemory
OpenMutexA
SetSystemPowerState
Sleep
SystemTimeToFileTime
WriteFileEx
lstrcatA
advapi32
GetFileSecurityA
GetSecurityInfo
GetMultipleTrusteeOperationA
GetMultipleTrusteeA
GetLengthSid
gdi32
GetROP2
GetWindowOrgEx
GetPolyFillMode
GetPixelFormat
GetPixel
GetPath
GetPaletteEntries
RealizePalette
ws2_32
socket
setsockopt
recv
connect
ntdll
RtlGetAce
RtlFreeHeap
RtlFreeHandle
RtlFormatMessage
NtPulseEvent
NtCreateTimer
NtCreateNamedPipeFile
NtCreateEvent
NtCancelTimer
NtCancelIoFile
NtCallbackReturn
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 946B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ