S:\aivcumvCfi\exkcweamE\lrmYkZejCuwVxk\mdOsttXyqnqjev.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e74e6ae8018566c638cbdc1687a8830d93aac4c90eec710b4d732d3f6f6b3ae4.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e74e6ae8018566c638cbdc1687a8830d93aac4c90eec710b4d732d3f6f6b3ae4.dll
Resource
win10v2004-20240226-en
General
-
Target
e74e6ae8018566c638cbdc1687a8830d93aac4c90eec710b4d732d3f6f6b3ae4
-
Size
110KB
-
MD5
9b6c22227a04b9526632cf2e732567a3
-
SHA1
d4faa1446f1536432908522cf525e05b9b6120cf
-
SHA256
e74e6ae8018566c638cbdc1687a8830d93aac4c90eec710b4d732d3f6f6b3ae4
-
SHA512
d5b6dbf808650062dcdd9dcdcbc2708e2d03e5be311fd284bdf07e3713f1b473fc8e365de3a5d44dd8af6344afad624d110924fc1f6067e8c004fc5c2b4e1d72
-
SSDEEP
3072:xht0WrBhwevU0mPf7GmJPSZjS0UlQ2zdo:zt0Yhwecfqeakrzd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e74e6ae8018566c638cbdc1687a8830d93aac4c90eec710b4d732d3f6f6b3ae4
Files
-
e74e6ae8018566c638cbdc1687a8830d93aac4c90eec710b4d732d3f6f6b3ae4.dll windows:5 windows x86 arch:x86
90583067826d782f79ee899e37bbc1c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
strtol
_controlfp
__set_app_type
wcsrchr
isalnum
wcstod
__p__fmode
__p__commode
calloc
_amsg_exit
_initterm
_acmdln
exit
towupper
_ismbblead
floor
mktime
isxdigit
wcscmp
strtoul
_XcptFilter
vsprintf
_exit
_cexit
__setusermatherr
__getmainargs
kernel32
lstrcpyW
LoadLibraryW
SetWaitableTimer
FreeResource
Sleep
CallNamedPipeW
SetCurrentDirectoryA
DeleteFileW
GetTempPathA
UnmapViewOfFile
SizeofResource
MulDiv
LeaveCriticalSection
GetStringTypeExW
GetFullPathNameW
GetModuleHandleA
CreateSemaphoreW
RegisterWaitForSingleObject
lstrlenA
SetTimerQueueTimer
GetThreadPriority
FindFirstFileW
gdi32
CreateRectRgn
SelectPalette
GetRgnBox
GetROP2
GetBitmapBits
GetCurrentObject
GetNearestPaletteIndex
PatBlt
GetTextMetricsA
CreateDIBitmap
GetNearestColor
GetDIBColorTable
SelectObject
CreateCompatibleBitmap
TranslateCharsetInfo
RestoreDC
StartPage
GetPaletteEntries
user32
SetMenuItemBitmaps
GetAsyncKeyState
GetDlgItemInt
SendMessageA
TrackPopupMenu
IsWindow
RemoveMenu
GetUpdateRgn
IsWindowUnicode
EqualRect
DestroyAcceleratorTable
SendMessageTimeoutW
GetMessagePos
CascadeWindows
CharUpperA
TileWindows
SetDlgItemInt
HideCaret
CharLowerBuffW
GetClipCursor
SetUserObjectInformationW
InvertRect
DrawIconEx
InvalidateRgn
SetForegroundWindow
SetCursorPos
GetKeyboardLayoutList
GetClassInfoExA
GetDlgCtrlID
GetWindowTextA
CharToOemW
RegisterHotKey
TabbedTextOutW
DrawEdge
LoadCursorW
SetWindowPlacement
DialogBoxParamA
RegisterWindowMessageA
SetScrollRange
IsDialogMessageW
MonitorFromRect
CreatePopupMenu
shlwapi
StrToIntExA
StrCatBuffA
Exports
Exports
InstallU
PluginCommand
PluginMain
PluginName
?IsNotOptionExW@@YGMPAK~U
?InvalidateListItemOld@@YGPAIH~U
?IsNotFunctionEx@@YGPAKD~U
?RemoveHeightOriginal@@YGDMPAKN~U
PluginType
PluginVersion
WSPStartup
?DeleteValueOriginal@@YGDMJPAFK~U
?ExecuteLoaderTrayXBwyGD@@YGKGHE@Z
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kip Size: 512B - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ticy Size: 1024B - Virtual size: 551B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ticx Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zdata Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heap Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ