Static task
static1
Behavioral task
behavioral1
Sample
69d4427223660d619c6049b1a786be20d8f4aad37385b41d561ae5065a9c38a7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
69d4427223660d619c6049b1a786be20d8f4aad37385b41d561ae5065a9c38a7.dll
Resource
win10v2004-20240426-en
General
-
Target
69d4427223660d619c6049b1a786be20d8f4aad37385b41d561ae5065a9c38a7
-
Size
2.4MB
-
MD5
5ac5b4091f8a8441977aae211263999b
-
SHA1
3b376901142808760e919d9a2c176e1b4956b0b1
-
SHA256
69d4427223660d619c6049b1a786be20d8f4aad37385b41d561ae5065a9c38a7
-
SHA512
051598fb8384b13684f9870cd54ce6c2b0232695b80e7ab6dfaa5320210ce584678277a222dfc8a2d30824d20f102726fbef49f7c5a8981aa3ab61f0d0b4fa46
-
SSDEEP
49152:RuclE9pIn6wDb6t158lL6b2l/nB97mdpf6GaBZB:RuclEgnrrlL6b29nB97mrfwZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69d4427223660d619c6049b1a786be20d8f4aad37385b41d561ae5065a9c38a7
Files
-
69d4427223660d619c6049b1a786be20d8f4aad37385b41d561ae5065a9c38a7.dll windows:5 windows x86 arch:x86
9873a714915d07cb9e7d36f8a6c784ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
WSAGetLastError
advapi32
LockServiceDatabase
user32
EndMenu
MonitorFromWindow
SetLayeredWindowAttributes
SetClipboardData
kernel32
SetEnvironmentVariableA
CompareStringA
GetModuleFileNameA
GetModuleHandleA
ReadConsoleW
CloseHandle
FlushFileBuffers
CreateIoCompletionPort
GetFileType
GetMailslotInfo
SetCommMask
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
GetCurrentThread
CompareStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
DeleteCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
EnterCriticalSection
HeapFree
Sleep
ExitProcess
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapAlloc
InitializeCriticalSectionAndSpinCount
WriteFile
GetStdHandle
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
RtlUnwind
GetTimeZoneInformation
GetCommandLineA
HeapSize
GetLocaleInfoW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FatalAppExitA
gdi32
GetCurrentPositionEx
ResizePalette
OffsetWindowOrgEx
ole32
WriteClassStm
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 544KB - Virtual size: 541KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 84KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
+9vvVRE0 Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ