Static task
static1
Behavioral task
behavioral1
Sample
7dec748bac8a6cda4652c6e1928f721995177860a336e5e4b52d02e5f2ad8964.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7dec748bac8a6cda4652c6e1928f721995177860a336e5e4b52d02e5f2ad8964.dll
Resource
win10v2004-20240226-en
General
-
Target
7dec748bac8a6cda4652c6e1928f721995177860a336e5e4b52d02e5f2ad8964
-
Size
2.5MB
-
MD5
e2795317b482d3125ce4cfb36c4838c6
-
SHA1
f0025b068a9c2ced1712ee62ae23c758f8850e41
-
SHA256
7dec748bac8a6cda4652c6e1928f721995177860a336e5e4b52d02e5f2ad8964
-
SHA512
900f0b287e7204f41aff3d543afa7279c4556d27fafd48dba4fe745e441c99829aa574f9a166fcc8f99a4b2f053bfa9cfdfd23390c0a833d5fb42adfcf791181
-
SSDEEP
49152:+x57O6sdri5D2e0aC3nIX6NqAoA34+iXuOMt:+x5Odri12ey3nykqHA34+UKt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dec748bac8a6cda4652c6e1928f721995177860a336e5e4b52d02e5f2ad8964
Files
-
7dec748bac8a6cda4652c6e1928f721995177860a336e5e4b52d02e5f2ad8964.dll windows:5 windows x86 arch:x86
abcf886df06a38758e3ba80bd35402c3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
WSAGetLastError
kernel32
GetTimeZoneInformation
ChangeTimerQueueTimer
ReleaseMutex
LoadLibraryW
LoadLibraryExW
GetBinaryTypeW
IsDebuggerPresent
TerminateProcess
SetUnhandledExceptionFilter
GetModuleFileNameW
SetStdHandle
DeleteCriticalSection
GetCurrentProcess
CloseHandle
RtlUnwind
UnhandledExceptionFilter
gdi32
GetEnhMetaFileHeader
CombineRgn
ole32
DoDragDrop
advapi32
QueryServiceStatus
GetPrivateObjectSecurity
GetOldestEventLogRecord
RegSaveKeyA
user32
GetMessageA
ToUnicodeEx
AdjustWindowRectEx
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.code Size: 488KB - Virtual size: 491KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lq8zSJD Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hm299*2 Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
=Womat6 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 664KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ