Static task
static1
Behavioral task
behavioral1
Sample
71c8f287d77f15ba137ee45b4c8b1507.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
71c8f287d77f15ba137ee45b4c8b1507.dll
Resource
win10v2004-20231215-en
General
-
Target
71c8f287d77f15ba137ee45b4c8b1507
-
Size
56KB
-
MD5
71c8f287d77f15ba137ee45b4c8b1507
-
SHA1
0b0d87f84c038668d5dcb16e105e3c6bf1a6899e
-
SHA256
9d7ea19e1b65abd90d568faf9f7258a81476455caa75f2fe4a8648c31ce2b503
-
SHA512
04864295d39c55908024cb0da707e6b0f1fef2e7155eebd7d7ac2c3974362b316bff3312e0b43bcdd1729d5275e15527cc18a0c07303a667a03aff48459a854d
-
SSDEEP
768:vQwxBkW8Ndmiqi45ZsZAG9L6D8gUdSVnRF1FMzr2TYGujdq1pF+9NyU26xtNL:vQw3b8Dmir+ZsZAm6IARV22TDlF+LXL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71c8f287d77f15ba137ee45b4c8b1507
Files
-
71c8f287d77f15ba137ee45b4c8b1507.dll windows:4 windows x86 arch:x86
4adaedbecffc397b0fa022259fb8e4b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
PtInRect
GetPropA
GetMenuItemID
EnumWindows
EndDialog
EnableWindow
DrawMenuBar
DialogBoxParamA
CheckRadioButton
BeginPaint
kernel32
SetConsoleCtrlHandler
lstrcmpiA
WriteFile
WaitForSingleObject
TerminateProcess
SetStdHandle
SetLastError
SetHandleCount
SearchPathA
RtlUnwind
CloseHandle
CreateConsoleScreenBuffer
DeviceIoControl
DisableThreadLibraryCalls
DuplicateHandle
ExitProcess
FatalAppExitA
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetExitCodeThread
GetLocaleInfoW
GetModuleHandleA
GetStartupInfoA
GetStdHandle
GetVersionExA
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
InitializeCriticalSection
IsValidLocale
MultiByteToWideChar
OpenEventA
ReadFile
ResetEvent
security
ImpersonateSecurityContext
DeleteSecurityContext
DecryptMessage
AcquireCredentialsHandleW
olepro32
OleIconToCursor
OleLoadPicture
oleacc
LresultFromObject
AccessibleChildren
CreateStdAccessibleObject
GetRoleTextA
advapi32
NotifyBootConfigStatus
GetTrusteeNameA
GetExplicitEntriesFromAclA
DeleteService
CryptHashSessionKey
CheckTokenMembership
BuildTrusteeWithObjectsAndSidA
AddAccessDeniedAceEx
IsValidSecurityDescriptor
setupapi
SetupQueryFileLogW
SetupQueryDrivesInDiskSpaceListA
SetupGetTargetPathW
SetupFindNextMatchLineA
SetupDiOpenDeviceInterfaceA
SetupDiGetDriverInstallParamsA
SetupDiAskForOEMDisk
SetupTerminateFileLog
Sections
.text Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ