GenericWndProc
Static task
static1
Behavioral task
behavioral1
Sample
336527cc5f794b09cd761f00b1550ec6661746bf2ea934f705f20febe7ebd124.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
336527cc5f794b09cd761f00b1550ec6661746bf2ea934f705f20febe7ebd124.dll
Resource
win10v2004-20240508-en
General
-
Target
336527cc5f794b09cd761f00b1550ec6661746bf2ea934f705f20febe7ebd124
-
Size
44KB
-
MD5
fd50b52de6aa60616ddcb1bd9c2cdd4b
-
SHA1
f071323a1bb6b48e65c78f80695806a2d783e143
-
SHA256
336527cc5f794b09cd761f00b1550ec6661746bf2ea934f705f20febe7ebd124
-
SHA512
5e08722a4138148758c63573b0366cf35fc6bff4a7a3376ef030169c95845d767059b207acde28f5b8cb1045c756442b634a3febc2dab7835cd0515f8a6634fd
-
SSDEEP
384:b5jsvLM8qkxXroC8TAv9BF8nYmmLHRf+7rQu+6/eHXMj6kILqjKjPy7s5eaP3bL6:lkFo9TAvCsA7L/WzkIGTaPMZcTTQc7e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 336527cc5f794b09cd761f00b1550ec6661746bf2ea934f705f20febe7ebd124
Files
-
336527cc5f794b09cd761f00b1550ec6661746bf2ea934f705f20febe7ebd124.dll windows:4 windows x86 arch:x86
1000c6843912ba4860c22b98ba5867a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GetTickCount
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalHandle
FreeResource
GetCurrentDirectoryA
lstrlenA
GetVersion
GetProcAddress
Sleep
FindResourceA
LoadResource
LockResource
LoadLibraryA
FreeLibrary
GlobalFree
user32
PeekMessageA
GetWindowRect
MapWindowPoints
EndDialog
SetWindowPos
GetSystemMetrics
EnumChildWindows
ShowWindow
GetDlgItem
LoadBitmapA
LoadStringA
GetParent
SendMessageA
MoveWindow
KillTimer
SetTimer
msvcrt
_adjust_fdiv
malloc
_initterm
free
??2@YAPAXI@Z
fclose
fread
fgetpos
fseek
fopen
??3@YAXPAX@Z
gdi32
DeleteObject
PatBlt
CreatePalette
StretchDIBits
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ