Static task
static1
Behavioral task
behavioral1
Sample
39a51d48bebe16a0c4e169efc1bc4b9298dde210598afc84e3ad04bde0336e99.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39a51d48bebe16a0c4e169efc1bc4b9298dde210598afc84e3ad04bde0336e99.dll
Resource
win10v2004-20240412-en
General
-
Target
39a51d48bebe16a0c4e169efc1bc4b9298dde210598afc84e3ad04bde0336e99
-
Size
33KB
-
MD5
57140c4b925dc908822455905bc4048f
-
SHA1
119218f4139e6be25ddd5cab3853ffd6d8c2f42e
-
SHA256
39a51d48bebe16a0c4e169efc1bc4b9298dde210598afc84e3ad04bde0336e99
-
SHA512
af41445f2282fb3919711702bf3c4a04f9ab25794e8c9192156a424392e3f2335a531a3e76619baf179db335f52f948e3376a844d0f500060ede0499a0b9d05e
-
SSDEEP
768:SzYw/rVVCNTrM7mPErcmlwwzqUMl2ynlGhC:SzYwDITYC1wuUMQJhC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39a51d48bebe16a0c4e169efc1bc4b9298dde210598afc84e3ad04bde0336e99
Files
-
39a51d48bebe16a0c4e169efc1bc4b9298dde210598afc84e3ad04bde0336e99.dll windows:4 windows x86 arch:x86
f8013a551bd2280ec453f7153e30a824
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetProcessHeap
HeapAlloc
GetLastError
VirtualProtect
lstrcatA
GetTickCount
GetTempPathA
ReleaseMutex
CreateMutexA
lstrcpynA
ReadProcessMemory
SetThreadPriority
TerminateProcess
GetModuleHandleA
CreateFileA
ReadFile
CloseHandle
GetFileSize
LoadLibraryA
GetProcAddress
CreateThread
GetPrivateProfileStringA
GetModuleFileNameA
WideCharToMultiByte
Sleep
user32
GetForegroundWindow
wsprintfA
GetClassNameW
GetWindow
gdi32
GetDeviceCaps
CreateCompatibleDC
DeleteDC
DeleteObject
BitBlt
SelectObject
CreateDCA
CreateCompatibleBitmap
msvcrt
_onexit
__dllonexit
exit
wcsstr
_strcmpi
_strupr
_strdup
??2@YAPAXI@Z
_stricmp
strcat
strrchr
strncpy
strstr
memset
strlen
strcpy
free
malloc
memcpy
??3@YAXPAX@Z
_except_handler3
wcscat
wcscpy
wcslen
isspace
isalnum
strchr
_vsnprintf
realloc
isdigit
isalpha
atoi
wcscmp
mbstowcs
_strlwr
wcsncat
gdiplus
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipDisposeImage
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
msvcp60
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
wsock32
gethostbyname
closesocket
recv
connect
htons
socket
WSAStartup
shutdown
send
Sections
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ