?zldfmVHajdlvvbHzwomo@@YGPAMM@Z
Static task
static1
Behavioral task
behavioral1
Sample
74ea99b770ec897229cb68a9d3485124.dll
Resource
win7-20231215-en
General
-
Target
74ea99b770ec897229cb68a9d3485124
-
Size
187KB
-
MD5
74ea99b770ec897229cb68a9d3485124
-
SHA1
0b41cc1840245014269bf8e6eb8d6934f3c34f74
-
SHA256
fd17760f03a63db0ba505e6b3226df61d57e0c204c34ca0ae8a417e514ee3789
-
SHA512
751eda44efc0fe38d601560403a9455c1caf0fd6f27ffadd7d5e3ef401e36fdfab633697a8e2998985b55888eaa779a272da00b73100ac1f72f91eac9968dd07
-
SSDEEP
3072:kefHzBFh6U7AtrlGg2ixOJt52UsOTlv1afwC/0q3gSXPEzERxniNN1T:kefHzBFl7AtrlgJt5dTLafL8WFx4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 74ea99b770ec897229cb68a9d3485124
Files
-
74ea99b770ec897229cb68a9d3485124.dll windows:5 windows x86 arch:x86
753077667db704cd1653aefa9a5de493
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetShortPathNameA
lstrlenW
lstrcpyA
GetLocaleInfoA
GetCommConfig
SetFilePointer
GetVersionExA
CreateNamedPipeW
GetSystemDefaultUILanguage
FlushFileBuffers
GlobalHandle
FindNextFileW
ntdll
_aullrem
user32
GetMessageA
EnableScrollBar
LoadBitmapW
SystemParametersInfoA
CreateAcceleratorTableW
GetWindowTextA
GetAsyncKeyState
OpenInputDesktop
SendNotifyMessageW
GetKBCodePage
CharNextW
ClipCursor
gdi32
SetLayout
CreateDIBSection
GetBkMode
GetDIBColorTable
GetDeviceCaps
RoundRect
CreateEllipticRgnIndirect
GetTextAlign
shlwapi
PathIsDirectoryW
StrIsIntlEqualW
Exports
Exports
Sections
.itext Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ