Static task
static1
Behavioral task
behavioral1
Sample
4f6581e701502f377b0eeb833a942603.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f6581e701502f377b0eeb833a942603.dll
Resource
win10v2004-20231222-en
General
-
Target
4f6581e701502f377b0eeb833a942603
-
Size
225KB
-
MD5
4f6581e701502f377b0eeb833a942603
-
SHA1
a6473c505e0b4d3b109808db349b8e0cd8aa526d
-
SHA256
75e22cb98fe934b49b1f08ba086d571a496b49bcc1ed6c8597b57a93c530b19b
-
SHA512
300498de830eb98a331c0b58092e0c97d98441ec9bafb7e3bc68f56dce0de9da9ff8981847d3101a9727b965123a921c55de44c6e03872bedc45204c0c8cb22b
-
SSDEEP
3072:uExJWEs0z4KHdvSOhNvCi5KVLvbnKDsRs2B+hHhCl1aIBZ3:rJdWKHsO3K1KGjB+hHoLtBN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f6581e701502f377b0eeb833a942603
Files
-
4f6581e701502f377b0eeb833a942603.dll windows:4 windows x86 arch:x86
b177060488b87daf35043d62d0786f34
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
LoadCursorA
GetFocus
DialogBoxParamW
DrawIconEx
CalcMenuBar
CreateIcon
DialogBoxParamA
InsertMenuA
CopyRect
GetDlgItem
GetWindowTextLengthA
CloseWindow
GetDC
LoadMenuA
GetMenu
DrawIcon
IsMenu
AlignRects
BlockInput
CopyImage
EndDialog
GetWindowTextA
AlignRects
IsWindow
LoadCursorA
AppendMenuA
CalcMenuBar
LoadMenuA
IsMenu
DrawIconEx
CopyIcon
DrawTextA
DialogBoxParamA
CloseWindow
GetDC
GetCursor
GetWindowTextLengthA
DrawTextA
GetMenu
AlignRects
CopyIcon
CopyImage
LoadCursorA
CalcMenuBar
IsMenu
DialogBoxParamW
AppendMenuW
CreateIcon
DrawTextW
AppendMenuA
IsWindow
LoadMenuA
GetWindowTextA
CloseWindow
DrawIcon
DialogBoxParamA
DrawIcon
IsWindow
DrawTextW
BlockInput
CopyIcon
CalcMenuBar
LoadCursorA
DialogBoxParamA
LoadMenuA
AppendMenuA
GetFocus
GetWindowTextLengthA
GetCursor
DrawTextA
advapi32
RegFlushKey
RegDeleteKeyW
RegGetKeySecurity
RegReplaceKeyA
RegOpenKeyExA
RegQueryValueExW
RegQueryInfoKeyA
RegDeleteValueW
RegEnumValueW
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyExA
RegCreateKeyExW
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
RegEnumValueA
RegCreateKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegQueryValueW
RegOpenKeyA
RegQueryValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegLoadKeyW
RegFlushKey
RegGetKeySecurity
RegEnumValueW
kernel32
GetCPInfo
OpenFile
GetCommandLineA
GetCurrentProcess
GetUserDefaultLangID
GetLastError
FindFirstFileA
Sleep
GetStdHandle
FindAtomA
DeleteAtom
GetCurrentThread
GetCurrentThreadId
GlobalFree
CreateProcessA
CreateThread
GetOEMCP
GlobalFree
CreateThread
DeleteFileA
GetConsoleMode
FindFirstFileA
GetCurrentProcess
GetUserDefaultLangID
ExitProcess
DeleteAtom
GetOEMCP
GetLastError
CreateProcessA
GetStdHandle
CopyFileW
GetCommandLineA
DeleteFileW
GetFileSize
GetConsoleOutputCP
ExitThread
DeleteFileA
GetFileTime
GetFileSize
FindFirstFileA
GetConsoleMode
DeleteFileW
Sleep
GlobalFree
GetCurrentThreadId
CreateDirectoryA
FindAtomA
FindFirstFileA
ExitThread
Sleep
GetConsoleMode
GlobalFree
DeleteFileW
GetCurrentProcess
GetStdHandle
GetFileTime
CreateThread
CopyFileW
GetUserDefaultLangID
GetConsoleOutputCP
GetOEMCP
OpenFile
GetCurrentThreadId
DeleteFileW
GetLastError
ExitThread
GetUserDefaultLangID
GetCommandLineA
GetCPInfo
GetFileTime
DeleteFileA
GetConsoleOutputCP
ExitProcess
GetStdHandle
CreateThread
CreateDirectoryA
GetCurrentThread
GetCurrentProcessId
FindAtomA
DeleteAtom
CopyFileW
GetConsoleMode
Sections
.itext Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 178KB - Virtual size: 541KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE