HntclhkiNutsouuoel
Static task
static1
Behavioral task
behavioral1
Sample
861fcc5f12294bed5d28cb92b2ac98005116c745f46493e712ec40c7d3eaf0c7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
861fcc5f12294bed5d28cb92b2ac98005116c745f46493e712ec40c7d3eaf0c7.dll
Resource
win10v2004-20240426-en
General
-
Target
861fcc5f12294bed5d28cb92b2ac98005116c745f46493e712ec40c7d3eaf0c7
-
Size
2.4MB
-
MD5
14fc6dfee5498b873a2ad20a62a61c99
-
SHA1
242a2abfeb4b49663b0fe3280ce013b128887475
-
SHA256
861fcc5f12294bed5d28cb92b2ac98005116c745f46493e712ec40c7d3eaf0c7
-
SHA512
26f4d73301f2a150130d21d675b93668a62d17a8818617525cdb35e2dd6e338fc8aa8c0f1701183b91b04b50157f683abe181dd9be4eab79531504d8f66744ee
-
SSDEEP
49152:BsfcdGBnwGRxgTSI1CzEcg21vp69DDwhA+iEOOYa2x6fX:BsdBxgT31ag21cYhLiEb2xa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 861fcc5f12294bed5d28cb92b2ac98005116c745f46493e712ec40c7d3eaf0c7
Files
-
861fcc5f12294bed5d28cb92b2ac98005116c745f46493e712ec40c7d3eaf0c7.dll windows:5 windows x86 arch:x86
af78a09c87c831e5c7ebb5e21dc43a57
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
rpcrt4
RpcServerUseProtseqEpW
gdi32
SelectClipPath
crypt32
CryptSIPRemoveProvider
advapi32
GetSecurityDescriptorGroup
kernel32
SetNamedPipeHandleState
LoadLibraryExA
GetLongPathNameA
GlobalFindAtomW
VerLanguageNameW
GetFullPathNameW
SetTapePosition
GetModuleFileNameA
GetBinaryTypeA
user32
IsChild
GetTopWindow
CreateIconIndirect
oleaut32
VarR8FromDate
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 485B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 388KB - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q Size: 780KB - Virtual size: 779KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
O|6pf Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ