EntryProc
Static task
static1
Behavioral task
behavioral1
Sample
512703e8472585a20f6780b7af50d46f.dll
Resource
win7-20231129-en
General
-
Target
512703e8472585a20f6780b7af50d46f
-
Size
2.1MB
-
MD5
512703e8472585a20f6780b7af50d46f
-
SHA1
b928f3717dc214a23c11e39cf388baa0270c9adb
-
SHA256
5012a4987db7f2ecddf87cb20cdb2c57f22700ab5ed34c9f773c12c5db4c12ed
-
SHA512
55e7e9a86d3f823c5cebbd221c70b613473acf9f200d44921cb03efbc69d78c56bdb7e7d62d22d9dd6ebb87e46e42aeb0ce6ac03f41a3767b56eb8503cce54ca
-
SSDEEP
49152:Ox3BjhawVg1PZIFEHTsO5Q2zyiU2jVkQx1rLJnp8be:uhAGa52iTzx1rLJn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 512703e8472585a20f6780b7af50d46f
Files
-
512703e8472585a20f6780b7af50d46f.dll windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 216KB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
txqxgwyy Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vvopjiho Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE