_ElfPrintProc@56
Static task
static1
Behavioral task
behavioral1
Sample
ab3206f9c504c381c9993a8557545786.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab3206f9c504c381c9993a8557545786.dll
Resource
win10v2004-20240226-en
General
-
Target
ab3206f9c504c381c9993a8557545786
-
Size
40KB
-
MD5
ab3206f9c504c381c9993a8557545786
-
SHA1
9acfae3ad0f558345d73b743db378c25b30b8c14
-
SHA256
e715c7616c3ebc9ac4858d148bc2a4c75a19bb9d4bffd9eac54f6a3efb7ecb7d
-
SHA512
d004ef49e7ad26c59b4a39abe357a2f6d766e5485f63c2fade86a2524f2edacb0ad90f8c633b90f0d3a5af0b5c8a75483b950cc280a208ee31332d24b5c9d68d
-
SSDEEP
384:WEZHxRqOx82q98Gb1MogQUmh50Ie64SCr82W1Oa9vPxkMJI25Mj3Cjx2xQENpu:frTxpq98GblgQP5G6jCG1DGCHVx2x9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab3206f9c504c381c9993a8557545786
Files
-
ab3206f9c504c381c9993a8557545786.dll windows:4 windows x86 arch:x86
f03da0ecd44a25070c91670979fd9068
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
pobint04
??1CFormData@@UAE@XZ
??0CFormData@@QAE@XZ
?setMenuName@CFormData@@QAEXPBD@Z
meta04
ord50
ord9
ord36
mfc42
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord6467
ord800
ord858
ord3262
ord535
ord860
ord2614
ord823
ord1168
ord2915
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord3136
ord4465
ord3259
ord3147
ord2982
ord3953
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord1116
ord4274
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord540
msvcrt
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
free
_onexit
__dllonexit
exit
_ftol
memmove
_control87
_initterm
atoi
strstr
fclose
__CxxFrameHandler
kernel32
CreateFileA
ReadFile
lstrlenA
CloseHandle
GetProfileStringA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
GetFileSize
LocalFree
LocalAlloc
lstrcpyA
GetFileAttributesA
user32
GetDesktopWindow
SetCursor
LoadCursorA
GetFocus
wsprintfA
CreateDialogParamA
SetFocus
EnableWindow
GetParent
SetWindowTextA
MessageBoxA
GetActiveWindow
DestroyWindow
SendMessageA
GetWindowRect
OffsetRect
SetWindowPos
GetDlgItem
gdi32
StartDocA
EndDoc
ResetDCA
CreateDCA
StartPage
EndPage
DeleteDC
winspool.drv
ClosePrinter
EndDocPrinter
StartDocPrinterA
OpenPrinterA
EndPagePrinter
WritePrinter
StartPagePrinter
DocumentPropertiesA
GetPrinterDriverA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
msvcp60
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1ios_base@std@@UAE@XZ
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@D@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xran@std@@YAXXZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??0Init@ios_base@std@@QAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@
??0ios_base@std@@IAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ