E:\Lost Folder Info\ProjFileNameData
Static task
static1
Behavioral task
behavioral1
Sample
7d84da46a2d98775189120bbffec2cb9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7d84da46a2d98775189120bbffec2cb9.dll
Resource
win10v2004-20231215-en
General
-
Target
7d84da46a2d98775189120bbffec2cb9
-
Size
73KB
-
MD5
7d84da46a2d98775189120bbffec2cb9
-
SHA1
3fff9c3d95cb926d6c9b6a2989261b00b65a01cf
-
SHA256
42dfb3e5e88e5c9f92a76e6dd33ae0391de4aba16b69fa697fed997b5acd18f3
-
SHA512
8548fc47cc3cc7308f361adde754588ecd884c251ff0ca687a3066dd372effff2b49ec4401ce76d81f949877241e5ea298e469d220aefb2982ee191ee0850c10
-
SSDEEP
1536:+vQw68NXsWKV5Z+ZJXVnrgaYhCCvZI2ZvPny7vN:y7686LD8NVzYxvic6vN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d84da46a2d98775189120bbffec2cb9
Files
-
7d84da46a2d98775189120bbffec2cb9.dll windows:5 windows x86 arch:x86
4bcaae8fb47b799f434e711fa8514813
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
hal
KeQueryPerformanceCounter
ntoskrnl.exe
IoSetShareAccess
IoAcquireVpbSpinLock
RtlTimeToSecondsSince1980
KeQueryActiveProcessors
RtlIntegerToUnicodeString
IoBuildPartialMdl
IoStartTimer
ZwSetValueKey
KeInsertDeviceQueue
IoGetStackLimits
IoDeleteSymbolicLink
WmiQueryTraceInformation
RtlGetNextRange
RtlTimeFieldsToTime
RtlSetDaclSecurityDescriptor
FsRtlIsFatDbcsLegal
KeInitializeTimerEx
IoCreateNotificationEvent
MmUnlockPagableImageSection
RtlInitializeBitMap
RtlNtStatusToDosError
ZwEnumerateValueKey
FsRtlAllocateFileLock
IoFreeErrorLogEntry
SeSetSecurityDescriptorInfo
ExDeleteResourceLite
MmPageEntireDriver
IoUnregisterFileSystem
KeBugCheck
RtlCreateAcl
FsRtlFreeFileLock
IoGetAttachedDeviceReference
RtlEqualString
SeValidSecurityDescriptor
CcUnpinDataForThread
Exports
Exports
?OnTimerTaskDialogExW@@ADIIPA_N<V
?GenerateListMediaTypeTimerScreenNew@@ADX_NKJ<V
?HideEventPenTextOld@@ADXD_NH<V
?IsValidFunctionDialogTimeProvider@@ADNKKDPAK<V
?PenConfigStringComponentOriginal@@ADKGPADEPAK<V
?LoadThreadProcessAppNameFileExW@@ADIPAF<V
?RemoveWidthOptionSystemW@@AD_NPAI<V
?RemoveExpressionDateTimeTimer@@ADPAXPAG<V
?GenerateTimeProviderKeyboardOriginal@@ADPAMPAIPAH<V
?SendFunctionWidthWindowInfoW@@AD_NIFD<V
?FindEventMutexPathPenOld@@ADGI<V
?ModifySemaphorePathMonitorDevice@@ADGPANMPAD<V
?AddRectTimeAnchorExW@@ADDPAKJPAEM<V
?SetFilePathSemaphoreCharOld@@ADNPAIE<V
?ShowCommandLineFolderPathAnchor@@ADPAGG_NMPAG<V
?InsertSemaphoreModuleTime@@ADPAXKEPA_NG<V
?MonitorPathFolderPathSystemW@@ADKM<V
?CopyProjectObjectWindowW@@ADEII<V
?DeleteTextTextListOption@@ADDGKJ<V
?PutClassClassSectionOriginal@@ADPAXPAMFHPAI<V
?HideValueMutantSemaphoreComponentOld@@ADPADPAJMMPAN<V
?ModifyPathCommandLineSystemComponentOriginal@@ADPAFPAKIPAGJ<V
?DecrementTaskDataDateMemoryExA@@ADGPA_NFPAG<V
?GenerateTimeModuleComponentW@@ADNFPAFEPAJ<V
?CloseTimeProfileThreadPointerOld@@ADPAMHPAI<V
?DeleteMemoryMutantObjectNew@@AD_NPAKPADME<V
?CloseFunctionComponentMediaType@@ADJDJPAK<V
?IncrementMessageHeightVersionPathNew@@ADXK<V
?FindListKeyboardConfigExW@@ADPADEMPAHH<V
?CallDateFilePathMutantRectA@@ADKD<V
?CopyAppNameSectionWidthExW@@ADJF<V
?InvalidateProviderMemoryRectW@@ADPADPAMEEN<V
?SetDirectoryFullNameMemoryObjectOld@@ADPAXPAKPAIDPAG<V
?RtlDirectoryComponentEventThread@@ADPAJHPAMI<V
?IsMessageListPathSectionW@@ADMKPAM<V
?SetWidthMessageDataFolderPathExA@@ADPAMPAFPADPADPAE<V
?CallProjectVersionKeyNameOptionOriginal@@ADKFEPANPAM<V
?KillProjectMutantWindowInfoEx@@ADPAMPAEPAI<V
?LoadHeightSemaphoreSizeSizeOriginal@@ADDPAGGN<V
?DeleteFolderPathExpressionScreenExA@@ADXPAF<V
?FormatDeviceSemaphoreWidthOld@@ADPAKI<V
?PutStateAnchorWindowInfoExW@@ADPADPAJPAIN<V
?HideFileScreenMediaTypeSystemOld@@ADXIPAEJ<V
?IsFileMessageFolderPathAppNameExA@@ADMD<V
?ShowConfigListListNew@@ADFPAII<V
?GenerateNameClassRectA@@ADDI<V
?CancelDialogConfigCommandLineEx@@ADMHGMPAF<V
?GenerateWindowRectRectW@@ADPAHPAM<V
?CrtFolderDialogAnchorFullNameOld@@ADIDJ<V
?IsWidthArgumentDialogCharNew@@ADKHPAMPAEG<V
?FreeValueMessageTimeNew@@ADHKFJ<V
?ModifyAnchorListEventMessageExW@@ADJEPAFPA_NK<V
?DecrementStateListItemSectionA@@ADPAFPAFKPAJPAJ<V
?RemoveAppNameKeyNameObjectA@@ADXPAEGPAJ<V
?CancelThreadPointArgumentRectEx@@ADXPAHPAGGPAJ<V
?SectionNameMutexExW@@ADJMK<V
?HideKeyboardSemaphoreHeightKeyNameA@@ADPAEGPAF<V
?GlobalPenPenProfileOriginal@@ADE_N<V
?PutSectionFileScreenOriginal@@ADPAEEEPAF<V
?ValidateTimerMutexFolderFolderPath@@ADHFM<V
?CopyArgumentKeyboardThreadExA@@ADJKE<V
?ObjectPointSize@@ADPAGJPAM<V
?RemoveFullNameComponentEventNew@@ADPAXPADKPAG<V
?CallDeviceFileConfig@@ADJKPAJ<V
?FreeRectWindowInfoCommandLineA@@ADPAJJN<V
?DeleteMediaTypeFileClassDateTimeA@@ADEPAD<V
?EnumHeaderArgumentPathObjectA@@ADPAFE_NM<V
?AddSizeTextMediaType@@AD_NIE<V
?IsValidDialogFullNameFilePointExA@@ADPAHPAEEI<V
?DecrementKeyNameScreenMonitorW@@ADPAGPAEJK<V
?CallProcessListItemDirectoryW@@ADXPAH<V
?CrtKeyboardDirectorySectionDirectoryW@@ADEG<V
?ModifyEventPathFunctionSystem@@ADFDMM<V
?SendTimeEventProcessRectA@@ADMDKG<V
?ValidateDialogMutexSemaphoreDirectory@@ADPAGENPAGPAI<V
?CopyComponentListTaskFolderOld@@ADIJPAHPAD<V
?InstallProcessDateFolderPathDialogOld@@ADXD<V
?KillProjectObjectTimeNew@@ADGJ<V
?ModifyRectPenWidth@@ADPAXIPANPAN<V
?AddStateDataDateOriginal@@ADDPANFPAM<V
?AddWindowInfoTextScreenExA@@ADMHEG<V
?FreeValueProjectListItemEx@@ADNPAFD<V
?InstallStringOptionFunctionListEx@@ADKEJI<V
?LoadAnchorStateFilePathA@@ADXF<V
?RtlDatePointerListItemVersionExA@@ADFI<V
?GenerateNameCommandLineEventEx@@ADIK<V
?GetMutexAppNameMutantProfile@@ADPAXNGHPAK<V
?PutWidthObjectTimerFullNameEx@@ADHDPAND<V
?HideProviderTimeThreadMutant@@ADEPAD<V
?HideMessageFolderPathMediaTypeExW@@ADPAHIFPAG<V
?GetNameHeightChar@@ADPAENPADDH<V
?AddVersionScreenKeyNameProviderExW@@ADPAF_NDK<V
?CopyDialogTimerClassTimeA@@ADGDJPAIJ<V
?InsertKeyboardAppNameMonitorExW@@ADXH<V
?KillFullNameComponentSystemExpressionOld@@ADPADPADFMPAK<V
?SetTaskNameFullNameDataW@@ADPADPAEPAE<V
?RemoveProfileClassEventRectW@@ADGPAIPAGJ<V
?SetPathAppNameMutantMediaTypeOld@@ADPAXIFPAFM<V
?LoadRectSystemRectValueA@@ADPAMPAHDD<V
?CancelWindowMutexPenOriginal@@ADXPADPAD<V
?ValidateProviderComponentObjectW@@ADMDIPAJN<V
?SendHeightFullNameDirectoryFileA@@ADKGPAGJ<V
?PutCharWidthProjectDeviceExW@@ADMD_NJ<V
?FormatFilePathVersionClassComponentW@@ADIJH<V
?EnumProcessAppNameDirectoryProcessOriginal@@ADPAXPAJ<V
?EnumHeaderMutantHeaderOriginal@@ADDFPAF<V
?RemoveScreenModuleWindowListOld@@ADJPA_N<V
?InvalidateDeviceExpressionAnchor@@ADPADPAFKGPAH<V
?OnFolderPathWindowTextFullName@@ADKI<V
?ModifyPenDeviceMonitorNew@@ADNPAHHPAID<V
?GenerateWindowInfoListItemMemoryListOld@@ADXG<V
?CloseExpressionThreadKeyboardDataExA@@ADNGK<V
?FreeProfileDataValueProvider@@ADJJPADDG<V
?FindListItemMessageEventExpressionW@@ADPAFPAIPAJPAK<V
?SendKeyNameDateDataW@@ADPAFMPAMPAH<V
?HideWindowCharDateProjectOld@@ADH_NM<V
?IsNotProviderHeaderNameProcess@@ADMDPAF<V
?InvalidateRectStateModuleDataExW@@ADEPAI<V
?IsDeviceClassVersionTextNew@@ADHPAF<V
?GetTimerKeyNameMessageCharNew@@ADPAFPAG<V
?CrtVersionListItemSizeTimer@@ADKPAJDEPAF<V
?SetSystemCharDateTimeA@@ADGJPADE<V
?EnumTimeHeaderTaskProfileOld@@ADPAEHIF<V
?CloseHeaderMemoryMutexDataOld@@ADMPADIN<V
?IsNotProcessRectTaskListItemOld@@ADXNPAK<V
?ModifyKeyNameDialogKeyNameOld@@ADHPAE<V
?InvalidateStringHeightAnchorOptionExW@@ADDIE<V
?FormatMemoryProjectThreadThreadNew@@ADKFIK<V
Sections
.text Size: 28KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ