Static task
static1
Behavioral task
behavioral1
Sample
f355060c6c8ac139c780b46f12136abd6090d3e1b2aaeaa7715d4a2260db30ef.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f355060c6c8ac139c780b46f12136abd6090d3e1b2aaeaa7715d4a2260db30ef.dll
Resource
win10v2004-20240419-en
General
-
Target
f355060c6c8ac139c780b46f12136abd6090d3e1b2aaeaa7715d4a2260db30ef
-
Size
2.8MB
-
MD5
a5320e66316c84b2598f925c04ef3e51
-
SHA1
524d74766faff5e6b9dbaafeaa199f03934a333b
-
SHA256
f355060c6c8ac139c780b46f12136abd6090d3e1b2aaeaa7715d4a2260db30ef
-
SHA512
adbc219ce9dfd2456324548cbc1c5036c593fb0b17bbfd4f24942225cfb72e215cadff77c139a6f0f24f8b0be3019a3e6181c93c0f42be747dfebdc575413da0
-
SSDEEP
49152:jsQiiOYvtqGpJS8XqOAWRUYxZa3iqExYVwms+GGnDa3o9:jsQ0otqGpMmqOX2eZLTmJDa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f355060c6c8ac139c780b46f12136abd6090d3e1b2aaeaa7715d4a2260db30ef
Files
-
f355060c6c8ac139c780b46f12136abd6090d3e1b2aaeaa7715d4a2260db30ef.dll windows:5 windows x86 arch:x86
5cbedb1736fbcc282a6d4873260e9221
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
powrprof
WriteGlobalPwrPolicy
kernel32
GetNumberOfConsoleInputEvents
GlobalSize
CloseHandle
RtlUnwind
ConnectNamedPipe
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetUserGeoID
WTSGetActiveConsoleSessionId
TerminateJobObject
GetStringTypeW
LoadLibraryExW
GetBinaryTypeW
GetModuleFileNameW
SetStdHandle
DeleteCriticalSection
TerminateProcess
user32
GetSysColorBrush
RegisterRawInputDevices
GetMessagePos
UnloadKeyboardLayout
BeginPaint
GetMessageA
GetSystemMenu
SetProcessWindowStation
advapi32
SetSecurityInfo
LookupPrivilegeValueW
ole32
HPALETTE_UserUnmarshal
gdi32
CreateCompatibleBitmap
OffsetViewportOrgEx
ExcludeClipRect
StrokeAndFillPath
OffsetClipRgn
DeleteObject
GetDeviceCaps
CloseEnhMetaFile
ws2_32
WSAGetLastError
Sections
.text Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.code Size: 476KB - Virtual size: 477KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lq8zSJD Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ