Static task
static1
Behavioral task
behavioral1
Sample
7d86d75aca09fb698a2f64ad562c50d92378e7267654795f3d9d3950b860d187.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7d86d75aca09fb698a2f64ad562c50d92378e7267654795f3d9d3950b860d187.dll
Resource
win10v2004-20240412-en
General
-
Target
7d86d75aca09fb698a2f64ad562c50d92378e7267654795f3d9d3950b860d187
-
Size
2.7MB
-
MD5
509dcfede1c3f89a23b046d47b1e5e25
-
SHA1
4fee3ecde34e7efab14603b62a2566e33dda539a
-
SHA256
7d86d75aca09fb698a2f64ad562c50d92378e7267654795f3d9d3950b860d187
-
SHA512
aeb764631518b6c70378cffc01aff8bc14c054160311cc051872e718b4787a2451a7afe81d8c00abdfc1daf3272bd90d5514ec0cc24d912fa40c0e44c2642518
-
SSDEEP
49152:/hjFAuW+I1ZcBtmNeslN7G2+MYvFzopGLv8IoXvSsaRrBkOhN6X/xpU:1FFW+ocu7G7MA6XdirBrho/x+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d86d75aca09fb698a2f64ad562c50d92378e7267654795f3d9d3950b860d187
Files
-
7d86d75aca09fb698a2f64ad562c50d92378e7267654795f3d9d3950b860d187.dll windows:5 windows x86 arch:x86
203d3dda5d965f2f9070a615f2d1653c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ole32
CreateDataAdviseHolder
user32
ShowCaret
SetWindowRgn
PostThreadMessageA
DlgDirListComboBoxW
netapi32
NetQueryDisplayInformation
powrprof
GetCurrentPowerPolicies
kernel32
TerminateProcess
RtlUnwind
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LoadLibraryExA
SetTimeZoneInformation
ResumeThread
OutputDebugStringA
GetModuleFileNameW
IsDebuggerPresent
GetBinaryTypeW
GetModuleHandleW
gdi32
GetBrushOrgEx
SetTextAlign
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 331B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
te Size: 544KB - Virtual size: 542KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 768KB - Virtual size: 766KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 904B
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ