Main_SerDialogBox
Static task
static1
Behavioral task
behavioral1
Sample
4d8dcf9fec6cc9ce918a4001d4f8f95730a9b88aeeef5b59296d2d427d629ffd.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4d8dcf9fec6cc9ce918a4001d4f8f95730a9b88aeeef5b59296d2d427d629ffd.dll
Resource
win10v2004-20240226-en
General
-
Target
4d8dcf9fec6cc9ce918a4001d4f8f95730a9b88aeeef5b59296d2d427d629ffd
-
Size
764KB
-
MD5
b61a33f428b5bffcd7439dd6305e5eab
-
SHA1
b0ba05bfa711294641f0335b7e0579b4725c361e
-
SHA256
4d8dcf9fec6cc9ce918a4001d4f8f95730a9b88aeeef5b59296d2d427d629ffd
-
SHA512
c70cb9b99b44b52585bdf5d4b29d05d49fcce32cd3738a2f5282027d072038ba7e5c1d296a7087d53dfcb3f305e56e28b09db809db9354ecd30cb9db65d342cd
-
SSDEEP
12288:BQ0wO1nQU1vYOeCQFeDfryaJW2nculAYblHn:B/wO1GOUFeDjF82ncQz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d8dcf9fec6cc9ce918a4001d4f8f95730a9b88aeeef5b59296d2d427d629ffd
Files
-
4d8dcf9fec6cc9ce918a4001d4f8f95730a9b88aeeef5b59296d2d427d629ffd.dll windows:4 windows x86 arch:x86
8f8c7283933131c26cfb5ecfb4741914
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualFree
VirtualAlloc
ReadFile
CloseHandle
GetFileSize
SetFilePointer
CreateFileA
WriteFile
GetModuleFileNameA
WaitForSingleObject
GetCurrentProcess
SetFilePointerEx
CreateThread
SetEvent
CreateEventA
GetLocalTime
FreeLibrary
InterlockedExchangeAdd
GetSystemInfo
InterlockedExchange
DeleteFileA
SetEnvironmentVariableA
CompareStringW
VirtualProtect
LCMapStringW
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetProcAddress
lstrcatA
HeapFree
GetModuleHandleA
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapAlloc
CompareStringA
GetCurrentThreadId
TerminateProcess
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetLastError
RtlUnwind
ExitProcess
HeapReAlloc
HeapCreate
HeapDestroy
GetTimeZoneInformation
GetSystemTime
GetCommandLineA
GetVersion
GetEnvironmentVariableA
GetVersionExA
user32
CheckMenuItem
GetMenuState
GetMenu
UnregisterClassA
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
RegisterClassA
PostMessageA
wsprintfA
SendMessageA
IsDlgButtonChecked
CheckDlgButton
GetParent
LoadCursorA
SetCursor
CallWindowProcA
SetWindowLongA
DialogBoxParamA
KillTimer
SetWindowTextA
SetTimer
LoadImageA
GetDlgItem
EnableWindow
SetDlgItemTextA
EndDialog
MessageBoxA
GetDlgItemTextA
PostQuitMessage
DefWindowProcA
EnableMenuItem
gdi32
CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush
SetTextColor
GetStockObject
SetBkMode
wsock32
ntohl
gethostbyname
ioctlsocket
wininet
InternetReadFile
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetCloseHandle
InternetSetOptionA
InternetOpenA
HttpQueryInfoA
HttpSendRequestA
Exports
Exports
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 456KB - Virtual size: 473KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ