honamlt
Static task
static1
Behavioral task
behavioral1
Sample
bc1a9994ee37e0e15154430431da9caa.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc1a9994ee37e0e15154430431da9caa.dll
Resource
win10v2004-20231215-en
General
-
Target
bc1a9994ee37e0e15154430431da9caa
-
Size
16KB
-
MD5
bc1a9994ee37e0e15154430431da9caa
-
SHA1
67aef8209d9ff75b56fdb4aa910b53583f1a86fc
-
SHA256
fd4802652b7b85a1fda2405565427bc7198ff24c3b4fe01eb30a834b79a69b5c
-
SHA512
4a7f9c7fa48fabe8a22ea604fea7c47c69f30f7b0ea3370e279bcaf4cd32b295289d466d8dcc341e5efee4ed4ce886f97cc226955f5249e7e95fb2cd41be3aa3
-
SSDEEP
384:k/97yNPCF8zLAwF0XoP0pRjixVK06chZEDZYypsYy:kl0C4LrF0XywRjYqchZEt0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc1a9994ee37e0e15154430431da9caa
Files
-
bc1a9994ee37e0e15154430431da9caa.dll windows:4 windows x86 arch:x86
09799ca29be29534cc62e17fd67e7b03
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowWindow
ReleaseDC
RegisterClassExA
RegisterClassA
PostQuitMessage
OpenIcon
LoadIconA
LoadCursorA
InvalidateRect
wsprintfA
GetSystemMetrics
GetMessageA
TranslateMessage
GetDC
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
CreateIconFromResourceEx
CreateIconFromResource
BeginPaint
ArrangeIconicWindows
AnyPopup
AnimateWindow
AdjustWindowRectEx
GetFocus
UpdateWindow
kernel32
HeapAlloc
GetModuleHandleW
lstrlenA
lstrcpyA
lstrcatA
Sleep
ReadConsoleOutputCharacterA
PrepareTape
GetProcessHeaps
GetModuleHandleA
GetCommandLineA
ExitThread
ExitProcess
DeviceIoControl
DeleteFileA
CreateSemaphoreA
CreateFileA
CloseHandle
comctl32
PropertySheetA
shell32
DragAcceptFiles
DragQueryFileA
gdi32
GetStockObject
GetTextMetricsA
GetBoundsRect
SelectObject
TextOutA
GdiFlush
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
PatBlt
BitBlt
ws2_32
setsockopt
recv
gethostbyname
WSASocketA
socket
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ