GetAFDistanceSetting
Static task
static1
Behavioral task
behavioral1
Sample
4a5989983d8d77ffb5ee1aae252589170c708607d30a88a2d9a31b489d3897c7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4a5989983d8d77ffb5ee1aae252589170c708607d30a88a2d9a31b489d3897c7.dll
Resource
win10v2004-20240226-en
General
-
Target
4a5989983d8d77ffb5ee1aae252589170c708607d30a88a2d9a31b489d3897c7
-
Size
203KB
-
MD5
d3659b44fb86433498ba0ccb554a9c34
-
SHA1
bf66c177000c710ec20e98fb7d10bcb626b5715b
-
SHA256
4a5989983d8d77ffb5ee1aae252589170c708607d30a88a2d9a31b489d3897c7
-
SHA512
2f24626cd05a9b00afbefb6977e6bbdfc827fe34a5a2a67e700644c9a4652206df6072d9b557e1184013e411e7ebe40944318ea8fc749453739201995e476fae
-
SSDEEP
3072:Cosu0JTLGRjsa3zPWpGAdjQgva++8bEJIld9130H05wLP1GuJnl:1ILGNVj+pGAdPC++kr913T5wLP1G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a5989983d8d77ffb5ee1aae252589170c708607d30a88a2d9a31b489d3897c7
Files
-
4a5989983d8d77ffb5ee1aae252589170c708607d30a88a2d9a31b489d3897c7.dll windows:4 windows x86 arch:x86
a0e6f166d935b14ea9ec8e09838ed72d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateEventA
DeviceIoControl
ExitProcess
FlushFileBuffers
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetDateFormatA
GetEnvironmentVariableA
GetFileTime
GetFileType
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetProcessWorkingSetSize
GetStartupInfoA
GetStringTypeW
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
MulDiv
MultiByteToWideChar
RtlUnwind
SetHandleCount
SetLastError
SetUnhandledExceptionFilter
TlsGetValue
WaitForMultipleObjects
WriteConsoleW
lstrcatA
lstrcmpA
lstrcmpiA
user32
SetWindowPlacement
SetDlgItemTextA
ScreenToClient
RegisterWindowMessageA
MsgWaitForMultipleObjects
LoadStringA
LoadCursorA
IsZoomed
GetWindowThreadProcessId
GetWindowLongA
GetSysColor
GetMenuItemID
GetDoubleClickTime
EnableMenuItem
DefWindowProcA
CloseClipboard
BeginDeferWindowPos
DestroyWindow
advapi32
ConvertAccessToSecurityDescriptorW
BuildTrusteeWithObjectsAndNameW
CryptEnumProvidersW
ElfRegisterEventSourceA
GetKernelObjectSecurity
LsaLookupPrivilegeValue
ObjectDeleteAuditAlarmW
QueryServiceStatus
ReadEventLogA
CreatePrivateObjectSecurityEx
ddraw
DDGetAttachedSurfaceLcl
DDInternalLock
DirectDrawCreateClipper
DirectDrawEnumerateW
GetSurfaceFromDC
ole32
CoBuildVersion
CoCreateInstance
CoGetMalloc
CLSIDFromString
Exports
Exports
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ