Static task
static1
Behavioral task
behavioral1
Sample
5a596acc916f37f266498535ebfc8d9e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5a596acc916f37f266498535ebfc8d9e.dll
Resource
win10v2004-20231222-en
General
-
Target
5a596acc916f37f266498535ebfc8d9e
-
Size
157KB
-
MD5
5a596acc916f37f266498535ebfc8d9e
-
SHA1
0dc760a1eee87cf7694ee8b660eb1fed894bd098
-
SHA256
3133030fce7533b588bcfd7904d042b38736662720fa4cbff40e59db9a12416b
-
SHA512
6ebb72768542cfa5e7d5f1a07f5f7195f65147b1bb5519137b836883f73867d943a052dac85d8597d0fbe0073d20c959a82ce4d0c6d0eb1dc36b42ecdd6fef5b
-
SSDEEP
3072:8+nZ7iDVn9/ugoC+zfgzSOP/GVgnJxvpWeYeQj2g0J+S+8gu/doQl:8+nZMnJu9PDgzwktpWevQKg0JN+8g6dP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a596acc916f37f266498535ebfc8d9e
Files
-
5a596acc916f37f266498535ebfc8d9e.dll windows:4 windows x86 arch:x86
1c9fd87e3738a28d8ab6f48b3c011152
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsDBCSLeadByte
LoadLibraryA
InterlockedDecrement
GetModuleFileNameA
GetProcAddress
GetStartupInfoA
Sleep
MulDiv
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
QueryPerformanceFrequency
IsDebuggerPresent
SetLastError
GetLastError
GetCurrentProcess
IsBadStringPtrA
GetProcessHeap
IsBadReadPtr
GetUserDefaultLCID
user32
GetCursor
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
IsCharUpperA
GetWindowDC
GetDC
WindowFromDC
GetIconInfo
GetAncestor
GetWindowInfo
GetWindowThreadProcessId
IsWindowVisible
GetParent
BlockInput
SetLastErrorEx
IsChild
IsWindowUnicode
advapi32
IsValidAcl
GetUserNameA
msvcrt
_adjust_fdiv
malloc
_initterm
free
_memicmp
_CIcosh
memchr
srand
_CIfmod
_set_error_mode
_CIacos
localeconv
_pctype
_isctype
__mb_cur_max
modf
_errno
_CIsinh
gdi32
GetBitmapDimensionEx
GetBkColor
GetStretchBltMode
GdiGetBatchLimit
GetPixel
ole32
CoGetCurrentProcess
shell32
ord524
ord66
ord680
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ