Static task
static1
Behavioral task
behavioral1
Sample
ba21c91e3d8acd314ea693321b8dbb60.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba21c91e3d8acd314ea693321b8dbb60.dll
Resource
win10v2004-20240226-en
General
-
Target
ba21c91e3d8acd314ea693321b8dbb60
-
Size
118KB
-
MD5
ba21c91e3d8acd314ea693321b8dbb60
-
SHA1
496cc139191e54d2d64fd79755658412b5a1f6d1
-
SHA256
768f5cfb0e37968e55da5f9ba7ed76f2ca2af76d200d61623c0b808ed75fccaf
-
SHA512
90d928b67a3cc4b30dbce937ac0c683ab66103b5e6a338979714c78acaf15c93edad4cec00cee2eb054b79a9050401af52a627a5de54a898914bbe201693c84f
-
SSDEEP
1536:lFnYP3JDrZ+bDgvnnfMF/15GAJAcxtMrYBTDuFag66Lj51vnEaKN:lQJDrI8fi/1NAcxm4vuB66JpA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba21c91e3d8acd314ea693321b8dbb60
Files
-
ba21c91e3d8acd314ea693321b8dbb60.dll windows:4 windows x86 arch:x86
92553ae2ecae8e4dff513c1f1ecc4a2a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
EnumResourceLanguagesA
ExitProcess
GetACP
GetCommandLineA
GetDateFormatA
GetLocalTime
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetVersion
HeapAlloc
InitializeCriticalSection
OpenFileMappingA
ReadFile
RtlUnwind
SetLastError
lstrcmpA
lstrcmpiA
user32
ShowCursor
DialogBoxParamA
DestroyIcon
shell32
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteW
Shell_NotifyIconA
setupapi
SetupGetInfFileListA
SetupFreeSourceListA
SetupFindNextMatchLineA
Sections
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ