Static task
static1
Behavioral task
behavioral1
Sample
aa0af740083dbda84b516e8993329964.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa0af740083dbda84b516e8993329964.dll
Resource
win10v2004-20240226-en
General
-
Target
aa0af740083dbda84b516e8993329964
-
Size
87KB
-
MD5
aa0af740083dbda84b516e8993329964
-
SHA1
266f395f12e7007a2c9423a93c80e99788212f8c
-
SHA256
2c6d1d28d7933da6266cbd415bf67db2eb4029daa91351a07233e13e289160d5
-
SHA512
afc76f66150a5f34d2ddd11e1395e2d06e22941faa4fdbc7cf86ec61696dd0f40e2a34712abac2341b6d22d8b2399197051106ab0ec611dfda30e083ba5ef3e3
-
SSDEEP
768:FZhQUNzU8qGu3XfAJEThwJcq0tFESlPZvU7U1sH8+Jkk5gqUdHkyvmSlvcduExxB:FJGGGh8SlRvU7ksH8+KmUllUYELPS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa0af740083dbda84b516e8993329964
Files
-
aa0af740083dbda84b516e8993329964.dll windows:4 windows x86 arch:x86
99ba21f21eb7a1a251977bdaf7f834a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CopyIcon
DestroyIcon
ExitWindowsEx
FindWindowExA
GetCapture
GetCursorPos
GetDC
GetDesktopWindow
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
IsWindow
LoadIconA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
BSS Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 32KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ