Static task
static1
Behavioral task
behavioral1
Sample
a76986735f037e35d977035318685e0f44484ca76f26f1b561b3f2f33800dfe7.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a76986735f037e35d977035318685e0f44484ca76f26f1b561b3f2f33800dfe7.dll
Resource
win10v2004-20240508-en
General
-
Target
a76986735f037e35d977035318685e0f44484ca76f26f1b561b3f2f33800dfe7
-
Size
6.7MB
-
MD5
210a83c9a03ca473635a3f85ed5a7157
-
SHA1
bfe10963a6bab5a7693d38edb0b758e0a7cfbaea
-
SHA256
a76986735f037e35d977035318685e0f44484ca76f26f1b561b3f2f33800dfe7
-
SHA512
53e0a35912a54d3819d42bd6d5f8ec64bb8f626a3a1fa7661d3ae173fb64855732c953aa8b06206b3c92e91a8803ff81f725cd0b513ea6c0bd2db627711ba54a
-
SSDEEP
196608:0Z+x1t1GshUqgqehvBypSKs3c2SvO+L0mn:0Z+x1t1GshUVlByUKs3cVvOu0mn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a76986735f037e35d977035318685e0f44484ca76f26f1b561b3f2f33800dfe7
Files
-
a76986735f037e35d977035318685e0f44484ca76f26f1b561b3f2f33800dfe7.dll windows:6 windows x86 arch:x86
e7c85b46c3f6fa48717448b0931ae34d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
WaitForSingleObject
GetModuleFileNameW
WriteFile
GetFileType
GetStdHandle
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
GetProcessHeap
HeapSize
GetExitCodeProcess
CreateProcessA
GetFileAttributesExW
OutputDebugStringW
SetStdHandle
WriteConsoleW
ReadConsoleW
SetEnvironmentVariableA
SuspendThread
FileTimeToLocalFileTime
GetExitCodeThread
GetLastError
GetCPInfoExW
GetPrivateProfileStringW
GetDriveTypeW
FindFirstFileW
ResumeThread
GetThreadPriority
GetUserDefaultUILanguage
GetPrivateProfileIntW
GetSystemInfo
GetTempPathW
GetFileAttributesW
lstrcpynW
ReadProcessMemory
SizeofResource
GetSystemDirectoryW
EncodePointer
LoadLibraryExW
GetFullPathNameW
EnumSystemLocalesW
CreateFileW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
IsProcessorFeaturePresent
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
DecodePointer
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
HeapFree
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
GetCommandLineA
GetCurrentThreadId
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
user32
GetDlgItemTextW
ShowOwnedPopups
EndPaint
DestroyWindow
SetCapture
DeleteMenu
RemovePropA
ShowCaret
GetMenu
GetScrollInfo
SetScrollPos
PeekMessageA
CheckDlgButton
SetWindowTextW
FlashWindow
GetKeyboardType
SetCaretPos
CreatePopupMenu
SendMessageW
GetDlgItemTextA
CheckMenuItem
GetDlgItemInt
PostQuitMessage
CharNextW
BeginPaint
GetDC
SetDlgItemInt
SetPropA
GetDlgItem
DefWindowProcA
GetDesktopWindow
GetSysColorBrush
IsDlgButtonChecked
InsertMenuA
gdi32
EndPage
LineTo
CreateFontIndirectW
SetDIBColorTable
GdiFlush
SetPixel
SelectClipRgn
CreateBrushIndirect
GetCurrentPositionEx
GetCharWidth32A
Polyline
GetClipBox
IntersectClipRect
TextOutA
CopyEnhMetaFileA
CreateHalftonePalette
GetTextExtentPointA
GetPixel
RestoreDC
ExtCreatePen
comdlg32
FindTextW
advapi32
RegLoadKeyW
GetLengthSid
RegQueryInfoKeyW
CopySid
OpenServiceW
OpenSCManagerW
AllocateAndInitializeSid
RegSetValueExW
shell32
Shell_NotifyIconW
ole32
CoInitialize
oleaut32
SafeArrayPtrOfIndex
SafeArrayCreate
SysReAllocStringLen
VariantInit
VariantCopy
Sections
.text Size: 521KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ