GetObjectData
Static task
static1
Behavioral task
behavioral1
Sample
8cb33b648e894679b70e0a4939b7ae1f.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8cb33b648e894679b70e0a4939b7ae1f.dll
Resource
win10v2004-20231215-en
General
-
Target
8cb33b648e894679b70e0a4939b7ae1f
-
Size
212KB
-
MD5
8cb33b648e894679b70e0a4939b7ae1f
-
SHA1
5aa3c3f1a819fba6432defa6b4c79060209a50fe
-
SHA256
e36cc9bc5cc958e4842568d5159eebc7e3e7fe56287b01954df0dc14066e4eba
-
SHA512
02e2ef0c9bd184020a2b51cb641de0ca3dcab4f6ce1f07f667bca6146324bb7b42bb4c7bbf5884c4b330e29069ab24c475a5163331e81bce84cfd89030d50cff
-
SSDEEP
6144:4+Fb4vAx23Z7ZB15eduyKEMst+in0oNwx:d4U2Jr2v3Nw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cb33b648e894679b70e0a4939b7ae1f
Files
-
8cb33b648e894679b70e0a4939b7ae1f.dll windows:4 windows x86 arch:x86
8958739f2ec7903f3e95ed40ed3946af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
ExitProcess
FormatMessageA
FreeEnvironmentStringsW
GetCommandLineA
GetCurrentThread
GetEnvironmentStringsA
GetModuleHandleA
GetProcessAffinityMask
GetSystemDirectoryA
GetUserDefaultLCID
GetVersionExA
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
IsDebuggerPresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
MulDiv
MultiByteToWideChar
ResetEvent
ResumeThread
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
WriteConsoleA
lstrcatA
user32
ModifyMenuA
LoadMenuA
GetWindowThreadProcessId
GetUpdateRgn
GetScrollInfo
GetMenuItemID
GetClassLongA
FindWindowExA
EndDeferWindowPos
EmptyClipboard
DeferWindowPos
CheckMenuRadioItem
BeginDeferWindowPos
CreatePopupMenu
advapi32
GetTraceEnableFlags
CryptGenRandom
CryptCreateHash
AddAccessAllowedAceEx
AreAnyAccessesGranted
ddraw
GetDDSurfaceLocal
DirectDrawEnumerateExW
GetSurfaceFromDC
DirectDrawEnumerateA
DirectDrawCreateEx
DirectDrawCreateClipper
DirectDrawCreate
DSoundHelp
DDInternalLock
DirectDrawEnumerateExA
ole32
CoQueryClientBlanket
IsEqualGUID
CoCreateInstance
Exports
Exports
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ