webmerebates
Static task
static1
Behavioral task
behavioral1
Sample
728242047c530c74e78a1a2fa0eed6cd.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
728242047c530c74e78a1a2fa0eed6cd.dll
Resource
win10v2004-20231215-en
General
-
Target
728242047c530c74e78a1a2fa0eed6cd
-
Size
100KB
-
MD5
728242047c530c74e78a1a2fa0eed6cd
-
SHA1
c4b17ce11233fb260bd0a4de43097590ed9d6ee5
-
SHA256
bd12ab313f5da849ac160260b0f9e9015b66a66eb8b8553ce62224d330093b42
-
SHA512
30572a14cee267045edf6f7e7f2551e30a35d9bab7306839bf58f56bad9d979464530ff1df4373cc0db850a8a8d747f809c32df69a81c366393b31ca30228d4b
-
SSDEEP
1536:TkgxXavyDj3JPToe3zBLViUJw+kwty9pJxo+7Z:Tkg4KXpH/w+kwty9pJxo+7Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 728242047c530c74e78a1a2fa0eed6cd
Files
-
728242047c530c74e78a1a2fa0eed6cd.dll windows:4 windows x86 arch:x86
3e3ad8b78843c0097b43243c6aa2b0b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
UnhookWinEvent
GetMessageA
TranslateMessage
DispatchMessageA
RegisterWindowMessageA
SetWinEventHook
GetCursorPos
keybd_event
IsIconic
GetForegroundWindow
IsChild
IsWindowEnabled
GetKeyState
MapVirtualKeyA
VkKeyScanA
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
SetWindowPos
GetWindowRect
ShowWindow
SetForegroundWindow
SendMessageTimeoutA
GetParent
SystemParametersInfoA
FindWindowA
IsWindow
GetWindow
GetClassNameA
GetAncestor
PostMessageA
GetWindowThreadProcessId
IsWindowVisible
GetWindowTextA
GetDesktopWindow
advapi32
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
GetUserNameA
RegQueryValueA
RegQueryInfoKeyA
kernel32
InitializeCriticalSection
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
GetVersion
GetCommandLineA
GetCurrentProcess
ExitProcess
ExitThread
DeleteCriticalSection
TlsSetValue
CreateThread
ResumeThread
LeaveCriticalSection
EnterCriticalSection
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapAlloc
InterlockedIncrement
InterlockedDecrement
RtlUnwind
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
TlsGetValue
SetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetLastError
FreeLibrary
ReleaseMutex
CreateDirectoryA
GetTickCount
GetCurrentProcessId
GetLongPathNameA
GetDiskFreeSpaceExA
GetDriveTypeA
GlobalMemoryStatus
GetVersionExA
GetWindowsDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryA
CreateProcessA
CloseHandle
TerminateProcess
OpenProcess
GetExitCodeProcess
WaitForSingleObject
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationA
CreateMutexA
GetCurrentThreadId
Sleep
MapViewOfFile
CreateFileMappingA
CompareStringW
CompareStringA
GetOEMCP
TlsAlloc
TlsFree
SetLastError
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
SetStdHandle
GetEnvironmentStrings
FlushFileBuffers
GetCPInfo
SetFilePointer
GetStringTypeW
GetStringTypeA
WriteFile
GetEnvironmentStringsW
GetStartupInfoA
ws2_32
inet_ntoa
gethostbyname
WSAStartup
oleacc
WindowFromAccessibleObject
AccessibleObjectFromWindow
GetStateTextA
GetRoleTextA
AccessibleObjectFromEvent
ObjectFromLresult
wininet
InternetGetConnectedState
InternetSetCookieA
InternetSetOptionA
InternetCheckConnectionA
InternetCloseHandle
HttpOpenRequestA
InternetReadFile
HttpSendRequestA
HttpQueryInfoA
InternetOpenA
InternetConnectA
InternetGetCookieA
ole32
CLSIDFromString
IIDFromString
CoCreateInstance
CoUninitialize
CoInitializeEx
oleaut32
VariantInit
VariantClear
SafeArrayCreateVector
SafeArrayGetLBound
SysAllocString
SafeArrayGetUBound
SysFreeString
SafeArrayAccessData
SafeArrayUnaccessData
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ