Static task
static1
Behavioral task
behavioral1
Sample
CsyonMenu.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
CsyonMenu.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
CsyonMenu.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral4
Sample
CsyonMenu.dll
Resource
win11-20240412-en
General
-
Target
Csyon.Menu.1.0.1.5.zip
-
Size
1.2MB
-
MD5
6a18d734cff99bfaab87f322b1688bb6
-
SHA1
c3904c85a5a87370093a39124d57d86d225afa11
-
SHA256
dbda8cac5738fcb9ee884827e8e15b87f26c3e11f92b3cad798a264f983008fb
-
SHA512
d9c5800dd10e60023a65b9beee5e16df6cb4b6af8a3757a9e21fd99bb3c4d18121abd801bebeac9d5a8f94e609a9f7d5d5c87a14cbfe211cc34f05a3662eca10
-
SSDEEP
24576:d9VODHB2BtBSv+7wilKlNJErTyLyzVdR/u5wkqa4q1M5ofYQh9ax:d9oHBq/aN5yz5SNv7fY29ax
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CsyonMenu.dll
Files
-
Csyon.Menu.1.0.1.5.zip.zip
-
CsyonMenu.dll.dll windows:6 windows x64 arch:x64
08a3847033f9db4dcea163e4e8437a73
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
wininet
InternetOpenUrlW
InternetOpenW
InternetCheckConnectionA
InternetReadFile
InternetCloseHandle
winmm
timeGetTime
kernel32
ReleaseSRWLockExclusive
SetEndOfFile
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
CreateProcessW
GetCurrentThreadId
Sleep
MoveFileExA
DisableThreadLibraryCalls
CreateThread
FreeLibraryAndExitThread
SwitchToFiber
GetModuleFileNameA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
SetConsoleTitleA
GetStdHandle
WriteConsoleA
WriteFile
SetConsoleMode
OutputDebugStringA
GetDynamicTimeZoneInformation
GetConsoleMode
GetFileAttributesA
GetCurrentProcessId
AllocConsole
GetTickCount
GetTickCount64
SizeofResource
FindResourceA
UnmapViewOfFile
CreateFileA
LockResource
CloseHandle
LoadResource
CreateFileMappingW
MapViewOfFile
FreeConsole
GetConsoleWindow
WinExec
HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
GetModuleHandleW
QueryPerformanceCounter
ConvertThreadToFiber
CreateFiber
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
GetCurrentProcess
Thread32Next
Thread32First
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
GetThreadContext
GetProcAddress
FlushInstructionCache
SetThreadContext
OpenThread
FormatMessageA
LocalFree
GetLocaleInfoEx
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFileInformationByHandle
AreFileApisANSI
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceFrequency
RtlUnwind
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LCMapStringEx
GetSystemTimeAsFileTime
WakeAllConditionVariable
SleepConditionVariableSRW
CompareStringEx
GetCPInfo
GetStringTypeW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
OutputDebugStringW
RaiseException
GetExitCodeProcess
WaitForSingleObject
DeleteFileW
ReadConsoleW
ReadFile
SetStdHandle
GetConsoleOutputCP
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitThread
GetModuleHandleExW
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleFileNameW
GetTimeZoneInformation
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
user32
ShowWindow
GetForegroundWindow
GetAsyncKeyState
FindWindowA
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 893KB - Virtual size: 893KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 246KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ