Static task
static1
Behavioral task
behavioral1
Sample
e76192509fc94057b769d276394f4994ae2765afad3b7b7e46c9ecabb127cf06.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e76192509fc94057b769d276394f4994ae2765afad3b7b7e46c9ecabb127cf06.dll
Resource
win10v2004-20240226-en
General
-
Target
e76192509fc94057b769d276394f4994ae2765afad3b7b7e46c9ecabb127cf06
-
Size
101KB
-
MD5
97bade257d09b6f2b7f882bdd6a7ec9f
-
SHA1
8a76145ba389a5bb41e667b0c34044353d5abe19
-
SHA256
e76192509fc94057b769d276394f4994ae2765afad3b7b7e46c9ecabb127cf06
-
SHA512
784ef3776c4810792b8d0433117f39ad33b21b07fbfba568e7468e1179b29dfb0206b8c6b2cf7ac08fbb701304f46cccbc5ad26713b0e7ad6ae3781854025574
-
SSDEEP
3072:+qTdOiwQpb+lbG4dFll59OUPKwYScEtnl:+qTdpwabobrzdG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e76192509fc94057b769d276394f4994ae2765afad3b7b7e46c9ecabb127cf06
Files
-
e76192509fc94057b769d276394f4994ae2765afad3b7b7e46c9ecabb127cf06.dll windows:5 windows x86 arch:x86
8fc9760973026f4a8d61f41434483404
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentThreadId
ExitProcess
IsBadReadPtr
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalSize
CreateThread
GetExitCodeThread
GetFileAttributesA
CloseHandle
GetShortPathNameA
SetFilePointer
GetLastError
WideCharToMultiByte
MultiByteToWideChar
Sleep
GetCurrentProcessId
lstrlenA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
GetCurrentDirectoryA
GetWindowsDirectoryA
DeleteFileA
LocalFree
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
CreateFileA
WriteFile
ReadFile
GetVersionExA
lstrcmpiA
lstrcatA
CreateFileMappingA
DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
LoadLibraryA
lstrcpyA
OpenSemaphoreA
GetTempPathA
user32
SendMessageA
PostMessageA
GetWindowTextA
GetActiveWindow
ClipCursor
SystemParametersInfoA
GetFocus
GetWindowLongA
GetParent
WindowFromPoint
ClientToScreen
GetWindowRect
GetClientRect
IntersectRect
RegisterClipboardFormatA
IsClipboardFormatAvailable
OpenClipboard
CloseClipboard
GetClipboardData
SetClipboardData
EmptyClipboard
GetKeyState
EnumClipboardFormats
IsWindow
IsChild
GetMenu
IsMenu
GetMenuItemInfoA
GetClipCursor
GetClipboardOwner
wvsprintfA
mouse_event
GetCursorPos
SendMessageTimeoutA
MessageBoxA
FindWindowExA
GetWindowThreadProcessId
ReuseDDElParam
UnpackDDElParam
GetClassNameW
GetClassNameA
SetForegroundWindow
GetForegroundWindow
GetTopWindow
GetDesktopWindow
GetWindow
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
gdi32
GetDeviceCaps
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ