Static task
static1
Behavioral task
behavioral1
Sample
7be88dbb912dc27c04e474732b52ac32.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7be88dbb912dc27c04e474732b52ac32.dll
Resource
win10v2004-20231215-en
General
-
Target
7be88dbb912dc27c04e474732b52ac32
-
Size
292KB
-
MD5
7be88dbb912dc27c04e474732b52ac32
-
SHA1
fbfbf1a50054d13454d55a9349c7f12b7a3b307b
-
SHA256
eb9eff7817b885b49b5cdaa32aa05ccd17a9f0a5f8fd53cef0342b678682d7b0
-
SHA512
ec8acfbe26841f776edabc14635ae3dceed15a42bc86fcef976b9bdab3f3c4d5447b21aef591b09807d244607f05f4b467c01f3fe327ca0e2061fb61320df118
-
SSDEEP
6144:BVk4wxUKUOU9+hakIjeJ+Eb2CfQniuhhOYO2CS:DPHnQzqeuXiyhLC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7be88dbb912dc27c04e474732b52ac32
Files
-
7be88dbb912dc27c04e474732b52ac32.dll windows:4 windows x86 arch:x86
dc919f5e941ff9c3e747a41de8e09f50
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
DrawTextA
AppendMenuW
GetMenu
LoadCursorA
CopyImage
InsertMenuA
GetDC
GetWindowTextA
CopyRect
AppendMenuA
BlockInput
CalcMenuBar
EndDialog
DrawTextW
IsWindow
CreateIcon
DialogBoxParamA
GetDlgItem
GetDlgItem
DrawIcon
GetFocus
BlockInput
GetWindowTextA
InsertMenuA
AlignRects
DrawIconEx
CopyImage
GetMenu
BlockInput
GetDC
EndDialog
GetDlgItem
CopyIcon
DrawIconEx
IsWindow
CopyImage
CloseWindow
DialogBoxParamW
GetFocus
LoadMenuA
IsMenu
DialogBoxParamW
CloseWindow
GetMenu
DialogBoxParamA
DrawTextW
InsertMenuA
AppendMenuA
GetDlgItem
LoadCursorA
GetCursor
CopyImage
BlockInput
AppendMenuW
DrawTextA
DrawIconEx
comctl32
ImageList_LoadImage
InitCommonControls
ImageList_DragLeave
ImageList_Merge
ImageList_LoadImageA
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
ImageList_DrawIndirect
ImageList_GetDragImage
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_Draw
ImageList_AddIcon
ImageList_GetDragImage
ImageList_Copy
ImageList_GetIcon
ImageList_Replace
ImageList_Remove
ImageList_Create
ImageList_Read
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_AddMasked
ImageList_GetImageRect
ImageList_Create
ImageList_Copy
ImageList_LoadImageA
ImageList_DragShowNolock
ImageList_EndDrag
ImageList_GetImageCount
InitCommonControls
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_DragMove
ImageList_AddIcon
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_Draw
ImageList_DragEnter
ImageList_Remove
ImageList_DragEnter
ImageList_Destroy
ImageList_DragLeave
ImageList_Draw
ImageList_DragMove
ImageList_Copy
ImageList_DrawEx
ImageList_GetImageCount
ImageList_GetDragImage
advapi32
RegLoadKeyW
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExA
RegDeleteKeyA
RegFlushKey
RegOpenKeyExW
RegOpenKeyA
RegQueryValueW
RegQueryValueExW
RegQueryValueExA
RegDeleteValueW
RegGetKeySecurity
RegEnumKeyA
RegDeleteKeyW
RegReplaceKeyA
RegOpenKeyW
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ