Static task
static1
Behavioral task
behavioral1
Sample
dfbabc1bfe752288e1c7b363e3ed40808ad0ba28ea2489e7131218577fa9191f.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
dfbabc1bfe752288e1c7b363e3ed40808ad0ba28ea2489e7131218577fa9191f.dll
Resource
win10v2004-20240508-en
General
-
Target
dfbabc1bfe752288e1c7b363e3ed40808ad0ba28ea2489e7131218577fa9191f
-
Size
2.3MB
-
MD5
67231596eabeedc755ff38655aa05413
-
SHA1
674c31391eefc25fd5b804974ff709d90ac82c1a
-
SHA256
dfbabc1bfe752288e1c7b363e3ed40808ad0ba28ea2489e7131218577fa9191f
-
SHA512
8de331bf860002922c240e874efe6f5e8585c238608dd4c8e920c39615ab1b9a792c53bb12ec53fc6375801d7ad05d868b9e934024c4695ea000cce17bd1b933
-
SSDEEP
49152:mY7EhHvWXbIfAHlwqSRACtlPYZemj/fat6kVOJEM:8heEfAeA0lPYZemnatVVO1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfbabc1bfe752288e1c7b363e3ed40808ad0ba28ea2489e7131218577fa9191f
Files
-
dfbabc1bfe752288e1c7b363e3ed40808ad0ba28ea2489e7131218577fa9191f.dll windows:5 windows x86 arch:x86
44a4da94d680efcae66b4e1fa6c26bf7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DuplicateHandle
SetUnhandledExceptionFilter
GetBinaryTypeW
GetCurrentProcess
GetProcessId
RtlUnwind
GetModuleFileNameW
CloseHandle
GetStringTypeW
IsDebuggerPresent
DeleteCriticalSection
GetFileInformationByHandle
GetACP
SetLastError
WaitForSingleObject
TerminateProcess
LoadLibraryExW
UnhandledExceptionFilter
SetStdHandle
user32
GetGUIThreadInfo
VkKeyScanExA
IsWindowUnicode
GetMessageA
BeginPaint
DestroyCaret
DestroyCursor
ws2_32
WSAGetLastError
gdi32
GetTextCharsetInfo
Rectangle
OffsetRgn
MaskBlt
DeleteColorSpace
advapi32
QueryServiceConfigW
QueryUsersOnEncryptedFile
CryptCreateHash
InitializeSecurityDescriptor
ImpersonateSelf
ole32
OleMetafilePictFromIconAndLabel
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 392KB - Virtual size: 392KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lq8zSJD Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 1.7MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
W6-kD Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c7=qUJW Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ