Static task
static1
Behavioral task
behavioral1
Sample
9624c1a187bea5b8b259f3de24f57d4e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9624c1a187bea5b8b259f3de24f57d4e.dll
Resource
win10v2004-20231215-en
General
-
Target
9624c1a187bea5b8b259f3de24f57d4e
-
Size
88KB
-
MD5
9624c1a187bea5b8b259f3de24f57d4e
-
SHA1
63925c52402651e09edf8dfe9eb0fc12cac7935c
-
SHA256
73e5a3614a77c4b128e3a638d05deb217e7ed60167c866463e8bdebbbc3094c9
-
SHA512
a40adee88316c1c0a9c217ac5a53b11a9895a7e45da4e94eb2c6c0b03705b110412fb6aecba14708c9b87e0265c0167ac84d2a4f9954d804a2b6d2ee391a6ffc
-
SSDEEP
1536:9XzE2TrmVJVw4x6rk2y7NgszV6BG4jkc5S39TTeT1VY4fXSPA:5E2TrZk5V14HsTIK4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9624c1a187bea5b8b259f3de24f57d4e
Files
-
9624c1a187bea5b8b259f3de24f57d4e.dll windows:4 windows x86 arch:x86
4afb74a22806cdba7cd07c2efa6cc4c7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowWindow
ShowOwnedPopups
ShowCursor
ShowCaret
MessageBoxIndirectA
LoadMenuA
LoadIconA
LoadCursorFromFileA
LoadBitmapA
LoadAcceleratorsW
IsCharLowerA
EndMenu
DestroyWindow
DestroyMenu
CreateIcon
CreateDialogIndirectParamA
CreateDesktopA
CreateAcceleratorTableA
CharUpperA
CharToOemBuffA
CharLowerA
ChangeMenuA
wsprintfA
kernel32
ExitThread
FlushFileBuffers
ExitProcess
EnterCriticalSection
CompareStringA
GetDateFormatA
GetLocalTime
GetVersion
lstrcpyA
lstrcmpiA
lstrcatA
UnmapViewOfFile
TlsAlloc
SetEndOfFile
RtlUnwind
ReadFile
OpenFile
MapViewOfFile
LoadLibraryA
GetVersionExA
FreeResource
oleaut32
OleTranslateColor
SafeArrayAccessData
SafeArrayAllocDescriptor
SafeArrayCreate
SysFreeString
VarBstrCmp
GetErrorInfo
Sections
.text Size: 18KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ