Static task
static1
Behavioral task
behavioral1
Sample
5371f9b16091403e70968424a34adb9a.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5371f9b16091403e70968424a34adb9a.dll
Resource
win10v2004-20231222-en
General
-
Target
5371f9b16091403e70968424a34adb9a
-
Size
115KB
-
MD5
5371f9b16091403e70968424a34adb9a
-
SHA1
7b617732c63d29fb04c575a8d9ea504c02808bca
-
SHA256
4deb39387c4e0a64768f0d096ba571a55df6ac3d2c84975dd8ff8d6942ed0c7c
-
SHA512
b84084286475654de499d086d850075d2d6f6a47c24fa33350d788e31b7c765a82e0437412b7844cf048cdd74886b3eb56f6c1c0f613662562233ede13e8e567
-
SSDEEP
1536:hIkcy85Oh3Q/PJ67VbtJivaDz6PwLrsH61GKZGuOld6ApDTOYj:J8l/+pmvahLC01Mfd6ApZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5371f9b16091403e70968424a34adb9a
Files
-
5371f9b16091403e70968424a34adb9a.dll windows:4 windows x86 arch:x86
2f931ff992ceac9acaf1310b8d0ad76e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gdi32
CreateSolidBrush
BitBlt
CancelDC
SetTextColor
AddFontResourceA
AddFontResourceW
AddFontResourceExA
GetBrushOrgEx
ClearBitmapAttributes
DeleteDC
BeginPath
ClearBrushAttributes
GetBitmapBits
AddFontResourceTracking
AddFontMemResourceEx
GetClipBox
CloseFigure
AddFontResourceA
AddFontResourceW
AddFontResourceExA
SetTextColor
ExtTextOutA
GetClipBox
AddFontResourceExW
ClearBrushAttributes
GetDCOrgEx
ClearBitmapAttributes
BitBlt
CloseMetaFile
GetBrushOrgEx
GetCurrentPositionEx
BeginPath
DeleteObject
CreateSolidBrush
ExtTextOutA
AddFontResourceExW
CancelDC
ClearBitmapAttributes
DeleteObject
GetCurrentPositionEx
CloseFigure
CreateSolidBrush
CopyMetaFileA
DeleteDC
user32
AlignRects
GetDC
IsMenu
GetDlgItem
AppendMenuA
LoadMenuA
InsertMenuA
AppendMenuW
GetMenu
GetWindowTextLengthA
IsWindow
GetCursor
LoadMenuA
InsertMenuA
GetDlgItem
CalcMenuBar
GetWindowTextA
DrawIcon
DialogBoxParamA
CopyRect
GetMenu
CopyIcon
DrawIconEx
InsertMenuA
DialogBoxParamA
LoadMenuA
GetMenu
CloseWindow
CopyIcon
CopyRect
GetDlgItem
AlignRects
DrawTextA
CalcMenuBar
DrawIcon
DialogBoxParamW
GetDC
IsWindow
AppendMenuA
CreateIcon
advapi32
RegLoadKeyA
RegCreateKeyW
RegFlushKey
RegOpenKeyA
RegEnumKeyExW
RegEnumKeyA
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExW
RegReplaceKeyW
RegEnumKeyExA
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegQueryValueA
RegOpenKeyW
RegEnumValueW
RegQueryValueExW
RegDeleteKeyA
RegOpenKeyW
RegOpenKeyA
RegLoadKeyW
RegCreateKeyExA
RegGetKeySecurity
RegReplaceKeyW
RegEnumKeyExA
RegQueryValueA
RegQueryInfoKeyA
RegFlushKey
RegCreateKeyExW
RegOpenKeyExA
RegLoadKeyA
RegQueryInfoKeyW
kernel32
CopyFileW
ReadFile
GlobalFree
WriteFile
CreateProcessA
CreateThread
GetCPInfo
CopyFileA
GetStdHandle
DeleteFileA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bbs Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 169B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ