Static task
static1
Behavioral task
behavioral1
Sample
5b30c1e9c5d4ea067b9fbaee0a1df7e4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b30c1e9c5d4ea067b9fbaee0a1df7e4.dll
Resource
win10v2004-20231222-en
General
-
Target
5b30c1e9c5d4ea067b9fbaee0a1df7e4
-
Size
318KB
-
MD5
5b30c1e9c5d4ea067b9fbaee0a1df7e4
-
SHA1
08162834c2e221f622e82669f4a62925ba989989
-
SHA256
c26e35e2e04fd02dca61a8cf8982f08127cc1c09d7a09812f9a7d628cde052b9
-
SHA512
e969bce536d4ce6368863cff1cfc1dbfe7eb484c7eb31ee7a59de34f84bc00533a8d37e9f48a9ec042eaebf83258431ccb606403350da89dd000c3d4075fa6ba
-
SSDEEP
6144:c5jnK3n3Dhpvv0ZPylfVIKqx3k/gH755nuAiPdrKIJf8CugqmksvNv/tAON82Iih:c5jnK3nThpvv0ZyVVId3k/GMN7NHyS8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b30c1e9c5d4ea067b9fbaee0a1df7e4
Files
-
5b30c1e9c5d4ea067b9fbaee0a1df7e4.dll windows:4 windows x86 arch:x86
d649af566ec3b7b57c58c6f8ab0fd7e7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
Shell_NotifyIconA
kernel32
GetACP
IsBadHugeReadPtr
GlobalAlloc
GetProcAddress
LocalAlloc
VirtualAlloc
ExitThread
GetModuleHandleA
LoadLibraryExA
LoadLibraryA
ExitProcess
GetLastError
msvcrt
swprintf
sprintf
strcmp
wcschr
wcstol
rand
memcpy
user32
OffsetRect
LoadKeyboardLayoutA
InsertMenuItemA
ActivateKeyboardLayout
GetClientRect
EnableScrollBar
SetWindowPos
IsDialogMessageW
InsertMenuA
GetActiveWindow
GetClassInfoA
CreateWindowExA
FrameRect
GetClassNameA
SetForegroundWindow
DefMDIChildProcA
GetPropA
IsZoomed
SetMenu
EnableMenuItem
MapWindowPoints
SetCursor
CharUpperBuffA
OemToCharA
ScreenToClient
CharNextA
GetKeyState
SetActiveWindow
InvalidateRect
GetForegroundWindow
SetClassLongA
GetClipboardData
LoadCursorA
DestroyIcon
EqualRect
GetKeyNameTextA
CharLowerBuffA
EnumThreadWindows
SetWindowPlacement
DrawEdge
InflateRect
RegisterClipboardFormatA
EmptyClipboard
CheckMenuItem
PtInRect
MsgWaitForMultipleObjects
GetScrollInfo
GetSystemMetrics
ShowWindow
IsWindowEnabled
GetMessagePos
GetKeyboardLayoutList
TranslateMessage
LoadStringA
SetCapture
GetFocus
GetKeyboardType
CreateIcon
CallWindowProcA
wsprintfA
IntersectRect
RemovePropA
GetMenuItemInfoA
GetSystemMenu
DispatchMessageA
SetClipboardData
UnregisterClassA
SetPropA
DrawMenuBar
GetSysColor
PostQuitMessage
GetWindowTextA
CharToOemA
EnumWindows
SetTimer
TrackPopupMenu
GetCursor
GetSysColorBrush
GetTopWindow
DrawFrameControl
GetKeyboardLayout
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES9 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES0 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 1024B - Virtual size: 795B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 606B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ