Static task
static1
Behavioral task
behavioral1
Sample
74ed6fee9f5713859a6aa75494ce901e.dll
Resource
win7-20231215-en
General
-
Target
74ed6fee9f5713859a6aa75494ce901e
-
Size
57KB
-
MD5
74ed6fee9f5713859a6aa75494ce901e
-
SHA1
3aaac41035d5a27b561b95ed76d8dfcb4bdd7066
-
SHA256
a29dff08ea24e6d43ebbcb090e8e3898a766918245819bfb2e46ebea3ed09c81
-
SHA512
5f95b8fe149840a613001c8bbf8af5640e9ba2c2ce75e7401e8c0c47f687388fbddb26c824aa6e6baa753b7cd42666371c22d6e35ba3120fc318e7b85e7e8e9d
-
SSDEEP
1536:hr7OaFCsK5Ehd0tkrpVUEkJ+H0jYJqXoxHOTMdtg:tOaY5m2Kr0EUG0jxX6OQ3g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 74ed6fee9f5713859a6aa75494ce901e
Files
-
74ed6fee9f5713859a6aa75494ce901e.dll windows:4 windows x86 arch:x86
ce8a8552016dfed27baac7c3c6d69c6d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualFree
GetLastError
FreeLibrary
LocalFree
GetModuleHandleW
GetProcAddress
LoadLibraryW
lstrcmpiW
lstrcpynW
GetCommandLineA
MultiByteToWideChar
lstrcatW
FormatMessageW
lstrcpyW
GetProfileStringW
lstrcmpA
lstrcpynA
lstrlenW
GetWindowsDirectoryW
VirtualProtect
WideCharToMultiByte
VirtualAlloc
user32
GetDlgItem
MessageBoxW
GetWindowTextW
GetWindowTextLengthW
LoadStringW
GetFocus
SetFocus
EnableWindow
SendMessageW
SetDlgItemTextW
LoadIconW
SendDlgItemMessageW
EnumDisplayDevicesW
DialogBoxParamW
EndDialog
GetWindowLongW
SetWindowLongW
MoveWindow
ScreenToClient
GetWindowRect
wsprintfW
gdi32
GetDeviceCaps
DeleteDC
msvcr71
_adjust_fdiv
_initterm
malloc
free
_onexit
_wcsdup
_wsplitpath
_wcsicmp
memmove
_except_handler3
__dllonexit
__CppXcptFilter
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ