Static task
static1
Behavioral task
behavioral1
Sample
77e2dc57eff0ec86228ecf3b222a6fa8182febe7f6e6ef9459edce15993e6544.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
77e2dc57eff0ec86228ecf3b222a6fa8182febe7f6e6ef9459edce15993e6544.dll
Resource
win10v2004-20240226-en
General
-
Target
77e2dc57eff0ec86228ecf3b222a6fa8182febe7f6e6ef9459edce15993e6544
-
Size
164KB
-
MD5
98bf61008b45c7c43b7055be6eade23e
-
SHA1
e688be09991cbb96992d188114a4e723ee2feca2
-
SHA256
77e2dc57eff0ec86228ecf3b222a6fa8182febe7f6e6ef9459edce15993e6544
-
SHA512
fb3f6285f8f0fb6d6ba87c3f896caaa3d5bcede5f8e6dd15165f5d483f2dda5df7a8ea662c5315b65aaec851f29aff16784e5d16325eccab2baaeffbd625789e
-
SSDEEP
3072:Xlsk2naxncT3KWE4tfgSefbROyS2mpfGB0LfdBnt:Ck2nKcuWJ6SeTQySVpf9j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77e2dc57eff0ec86228ecf3b222a6fa8182febe7f6e6ef9459edce15993e6544
Files
-
77e2dc57eff0ec86228ecf3b222a6fa8182febe7f6e6ef9459edce15993e6544.dll windows:5 windows x86 arch:x86
37dd3baf479395ece37cfb5f98b442a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
Imports
msvcrt
_ultoa
strtoul
_mbsnbicmp
_mbsstr
sprintf
_ismbcdigit
sscanf
_except_handler3
strchr
_ismbcalpha
atoi
_mbslen
_mbsnicmp
_adjust_fdiv
malloc
_initterm
free
_mbsdec
_ismbblead
_mbsinc
_mbsrchr
_mbschr
wcslen
_mbsicmp
kernel32
CloseHandle
HeapFree
GetCurrentProcess
GetACP
GetVersion
GetFileAttributesA
LoadLibraryA
GetWindowsDirectoryA
GetEnvironmentVariableA
GetProcAddress
GetSystemDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
ReadFile
GetDiskFreeSpaceA
GetModuleHandleA
GetPrivateProfileStringA
GetLastError
FreeLibrary
DeleteFileA
GetExitCodeProcess
WaitForSingleObject
GetTempPathA
SetLastError
user32
CharLowerA
wsprintfA
advapi32
RegQueryValueExA
GetUserNameA
OpenProcessToken
GetTokenInformation
LookupAccountSidA
RegEnumKeyA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
ole32
CoInitialize
CoUninitialize
log
LogIfA
LogBegin
LogA
LogEnd
LogReInitA
IsmAbortComponentEnu
IsmEnumNextComponent
TrackedIsmCreateSimpleObjectPattern
TrackedIsmCreateObjectStringsFromHandleEx
IsmDestroyObjectString
IsmTickProgressBar
IsmHookEnumeration
IsmIsObjectHandleLeafOnly
TrackedIsmCreateObjectPattern
IsmQueueEnumeration
IsmGetTransportVariable
IsmIsEnvironmentFlagSet
IsmSetCancel
IsmSetEnvironmentString
IsmSetTransportVariable
TrackedIsmCreateObjectHandle
IsmAcquireObjectEx
IsmReleaseObject
IsmDestroyObjectHandle
IsmRegisterAttribute
IsmGetObjectTypeId
IsmGetRealPlatform
Sections
.text Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ