Static task
static1
Behavioral task
behavioral1
Sample
0f0a34b4d5d8d340b4367b69dbf2efa2ca9f3ed0f7818cd40939a2b7fc90c137.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f0a34b4d5d8d340b4367b69dbf2efa2ca9f3ed0f7818cd40939a2b7fc90c137.dll
Resource
win10v2004-20240611-en
General
-
Target
0f0a34b4d5d8d340b4367b69dbf2efa2ca9f3ed0f7818cd40939a2b7fc90c137
-
Size
456KB
-
MD5
63e9264ac11a9dbd132f1e4a4c0f3bce
-
SHA1
d34240938740cfc60e95b36dd39824fa2bcf146b
-
SHA256
0f0a34b4d5d8d340b4367b69dbf2efa2ca9f3ed0f7818cd40939a2b7fc90c137
-
SHA512
8505d691350560fb01de0929a0fdfc77fd23bd6058437b8528bf0876b011307d8fd1508a7b504180da701e51f93569025cb12bd76a82dafaacdf6f4c065a57a7
-
SSDEEP
6144:3eJNIppGQ1vdGoQq+iJhyV68NIKnyTsO41q/EpwXsWr07rNvfL:3eJT6VGoQRiJhyVr7Rf8sEr4Jf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f0a34b4d5d8d340b4367b69dbf2efa2ca9f3ed0f7818cd40939a2b7fc90c137
Files
-
0f0a34b4d5d8d340b4367b69dbf2efa2ca9f3ed0f7818cd40939a2b7fc90c137.dll windows:6 windows x86 arch:x86
ca437f6f7b8f89b294cc674b0bb05590
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FileTimeToSystemTime
GetStartupInfoW
DeleteFileW
CreateThread
GetFullPathNameW
GetCommandLineW
GetEnvironmentVariableW
RtlCaptureContext
SystemTimeToFileTime
GetEnvironmentStringsW
GetCurrentThread
GetPrivateProfileStringW
ClearCommBreak
HeapDestroy
GetFileAttributesA
Beep
MulDiv
TerminateProcess
GetACP
SetThreadLocale
ResetEvent
DeviceIoControl
FindNextFileW
DeleteCriticalSection
lstrcpyW
SetEndOfFile
FindResourceW
InitializeSListHead
WaitForSingleObject
GetSystemDirectoryW
IsProcessorFeaturePresent
GetTempPathW
FindClose
TlsAlloc
DeleteFileA
GetTickCount
GetOverlappedResult
ResumeThread
FindFirstFileW
GetDriveTypeW
LoadLibraryExW
GetVersionExW
GetSystemInfo
GetModuleFileNameW
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
HeapReAlloc
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleFileNameA
IsValidCodePage
GetFileType
GetStdHandle
HeapSize
GetModuleHandleExW
ExitProcess
GetProcessHeap
IsDebuggerPresent
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
VirtualQueryEx
EnumCalendarInfoW
TlsGetValue
CloseHandle
GetStringTypeW
GetOEMCP
VirtualAlloc
GetThreadLocale
MultiByteToWideChar
IsDBCSLeadByteEx
HeapCreate
Sleep
SizeofResource
SetCommBreak
QueryPerformanceCounter
GetCurrentProcess
SystemTimeToTzSpecificLocalTime
SetErrorMode
GetSystemDefaultUILanguage
GetFileSize
SetDllDirectoryW
EncodePointer
GetProcAddress
GetModuleHandleW
TlsFree
TlsSetValue
WideCharToMultiByte
DecodePointer
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetCommandLineA
GetCurrentThreadId
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
user32
LoadMenuW
DrawTextExW
GetMenuItemInfoW
SystemParametersInfoW
ValidateRgn
SetWindowTextW
GetWindowLongW
MonitorFromWindow
InsertMenuW
GetSubMenu
LoadStringA
CharLowerBuffW
EnumWindows
GetDC
EnableScrollBar
GetMenuItemCount
DestroyIcon
SetMenuItemInfoW
GetMonitorInfoW
GetWindowThreadProcessId
EndPaint
GetKeyState
CheckMenuRadioItem
GetWindowTextW
SetDlgItemInt
MessageBoxA
GetDesktopWindow
GetDlgItemTextW
IsRectEmpty
GetWindowInfo
gdi32
CombineRgn
OffsetRgn
RectInRegion
SetWindowOrgEx
ExtFloodFill
GetCharABCWidthsW
SetROP2
SetWinMetaFileBits
PolyPolygon
comdlg32
GetSaveFileNameW
advapi32
RegLoadKeyW
SetSecurityDescriptorOwner
RegSetValueExW
RegDeleteValueA
SetSecurityDescriptorDacl
RegOpenKeyExW
OpenProcessToken
StartServiceW
shell32
SHGetFileInfoW
oleaut32
SysFreeString
SysAllocStringLen
SafeArrayCreate
VariantCopy
VariantInit
Sections
.text Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ