StartW
Static task
static1
Behavioral task
behavioral1
Sample
7c44e0a43e508476eda5f699d39a0c7f.dll
Resource
win7-20231215-en
General
-
Target
7c44e0a43e508476eda5f699d39a0c7f
-
Size
656KB
-
MD5
7c44e0a43e508476eda5f699d39a0c7f
-
SHA1
f7233d983272e37c5c74949dafbb07ff767b8bf7
-
SHA256
bf81ad343dce8b514941ffd47576b78e02b41c23aec991fd5a48ad00c67ad942
-
SHA512
0e190f758c115e66aa1f21bd7213a41f93d088d4b5ea6b06dba7539996818983a424383b6bbec72c4fbfa9f2d322e2308cbe0c6a972cbac4220ffd8c85b46954
-
SSDEEP
12288:5bjfhtlWxycV80o3xKA3cHfnoEQOuG/ENYIm8MxxO9qrcOJz8:5bj9ZcG0CxKA3cHPoEQRjNXNYxtnF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c44e0a43e508476eda5f699d39a0c7f
Files
-
7c44e0a43e508476eda5f699d39a0c7f.dll windows:4 windows x86 arch:x86
8b7fb8fc4de24822c3d2cd067d85f8ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
LCMapStringW
LCMapStringA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
TerminateProcess
ExitProcess
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
GetProcessVersion
MulDiv
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
SetLastError
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
QueryPerformanceFrequency
InterlockedIncrement
GetModuleFileNameA
GetCurrentThread
lstrcmpA
FindResourceA
GetCurrentThreadId
lstrcmpiA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
lstrcatA
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
lstrcpyA
lstrlenA
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryA
GetProcAddress
FreeLibrary
LoadLibraryW
GetCurrentProcess
QueryPerformanceCounter
CreateThread
Sleep
WaitForSingleObject
CloseHandle
ResumeThread
SetStdHandle
user32
ValidateRect
TranslateMessage
GetMessageA
CharUpperA
DestroyCursor
LoadCursorA
SetRect
PtInRect
FindWindowA
IsRectEmpty
ClientToScreen
BeginPaint
EndPaint
InflateRect
wvsprintfA
SetParent
AppendMenuA
DeleteMenu
GetSystemMenu
SetTimer
KillTimer
WindowFromPoint
GetSysColorBrush
GetClassNameA
LoadStringA
InsertMenuA
GetMenuStringA
DestroyIcon
GetTabbedTextExtentA
SetCapture
InvertRect
GetDCEx
LockWindowUpdate
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
ScreenToClient
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
RegisterClassA
TrackPopupMenu
GetWindowTextLengthA
DefWindowProcA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
GetCursorPos
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
GetLastActivePopup
GetFocus
EqualRect
GetDlgItem
GetKeyState
GetDlgCtrlID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
LoadIconA
GetClassInfoA
DestroyMenu
SetFocus
GetWindow
IsWindowEnabled
SetCursor
PeekMessageA
PostMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
GetActiveWindow
wsprintfA
GetParent
GetMenuItemID
AdjustWindowRectEx
GetWindowLongA
SetWindowLongA
DefMDIChildProcA
DrawMenuBar
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
CreateWindowExA
BringWindowToTop
GetMenu
GetMenuItemCount
ReleaseDC
IsWindow
SetWindowPos
GetDC
GetWindowDC
IsClipboardFormatAvailable
GetClipboardData
ShowWindow
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
UpdateWindow
EnableWindow
LoadBitmapA
CloseClipboard
RedrawWindow
CopyRect
GetSysColor
EnumWindows
GetDesktopWindow
IsWindowVisible
GetWindowTextA
InvalidateRect
LoadMenuA
GetSubMenu
IsIconic
IsZoomed
GetWindowRect
GrayStringA
DrawTextA
ShowOwnedPopups
PostQuitMessage
EndDialog
CreateDialogIndirectParamA
RemovePropA
GetMenuCheckMarkDimensions
TabbedTextOutA
GetClientRect
FillRect
SendMessageA
OpenClipboard
EmptyClipboard
SetClipboardData
DestroyWindow
gdi32
StretchBlt
SetStretchBltMode
SetTextColor
SetBkColor
CreateBitmap
StretchDIBits
CreateDIBitmap
GetClipBox
GetStockObject
Rectangle
CreatePen
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
SetAbortProc
CreateDCA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
DeleteDC
SetTextAlign
GetCurrentPositionEx
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateFontIndirectA
GetCharWidthA
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
GetObjectA
GetDIBits
SelectObject
DeleteObject
PatBlt
GetTextMetricsA
GetTextExtentPoint32A
CreateFontA
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetMapMode
DPtoLP
GetBkColor
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
UnrealizeObject
LPtoDP
SetBrushOrgEx
GetDeviceCaps
LineTo
GetTextExtentPointA
CreateHatchBrush
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
PrintDlgA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegDeleteValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
shell32
SHGetFileInfoA
DragAcceptFiles
DragQueryFileA
DragFinish
ExtractIconA
comctl32
ord17
Exports
Exports
Sections
.text Size: 296KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 264KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ