?_SetCaretPos@@YGPAXPAKPAEPAI@Z
Static task
static1
Behavioral task
behavioral1
Sample
8eeebb1c61d8aa8b39a2c8bdad24ee6f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8eeebb1c61d8aa8b39a2c8bdad24ee6f.dll
Resource
win10v2004-20231215-en
General
-
Target
8eeebb1c61d8aa8b39a2c8bdad24ee6f
-
Size
148KB
-
MD5
8eeebb1c61d8aa8b39a2c8bdad24ee6f
-
SHA1
390b67d8ce020c504ed723afae488e0d4116193f
-
SHA256
1cbecbc1efb723000969427d635cc53c772fd27095437e6ad45de751b4ed07e4
-
SHA512
27702a2af8e5a5fd117df649b148bb25c8596ea4f23ed8259d4028d19f6ddf75d01344998e8d3af239fd2dfb45c516042d76746d14ddf79f0dcb5f78ca7019d2
-
SSDEEP
3072:CSs0s9hlUGiVRLeqFpcPVs2sGfAZ0eBK4rPyQWSIA9JviNSUl:mDhlUXHr3c9s2LA+SWtps2Xl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eeebb1c61d8aa8b39a2c8bdad24ee6f
Files
-
8eeebb1c61d8aa8b39a2c8bdad24ee6f.dll windows:5 windows x86 arch:x86
c9c1af7c2d7ff91e0933f48f81932083
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
StrCpyW
StrCmpNIW
PathCombineW
StrRChrIW
ord158
PathFindNextComponentW
ChrCmpIW
kernel32
lstrcatW
LoadLibraryExW
GetCommConfig
OpenFileMappingA
CopyFileExA
FileTimeToDosDateTime
GetCommModemStatus
ClearCommError
OpenWaitableTimerW
QueryInformationJobObject
GetDevicePowerState
SetTapePosition
CreateMemoryResourceNotification
GlobalFree
GetDiskFreeSpaceExW
CreateMailslotW
GetModuleFileNameW
CreateSemaphoreA
MulDiv
user32
GetWindowTextW
GetKeyboardLayout
SetWinEventHook
CreateIconFromResourceEx
ReplyMessage
ClientToScreen
GetNextDlgTabItem
GetMenuState
SetMenuContextHelpId
EnumDesktopsA
EnableScrollBar
OpenClipboard
HiliteMenuItem
SystemParametersInfoA
RegisterClassW
DestroyMenu
RegisterDeviceNotificationA
LoadCursorW
GetPropW
gdi32
PolyDraw
SelectObject
GetWinMetaFileBits
EnumEnhMetaFile
CreatePen
GetPolyFillMode
CopyEnhMetaFileA
GetDeviceCaps
GetTextExtentPoint32W
CreateEllipticRgn
PolyBezierTo
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icode Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m_data Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.с_data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.n_data Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ