Static task
static1
Behavioral task
behavioral1
Sample
dbf45c079b8991e937e45cdb848546a16df89f68712672376c490e0e6cc58d8e.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
dbf45c079b8991e937e45cdb848546a16df89f68712672376c490e0e6cc58d8e.dll
Resource
win10v2004-20240704-en
General
-
Target
dbf45c079b8991e937e45cdb848546a16df89f68712672376c490e0e6cc58d8e
-
Size
481KB
-
MD5
31104829cf4647acca7c96bb11b4d05a
-
SHA1
d9ff77bf35552c47aeb472636eb28ca2088219ea
-
SHA256
dbf45c079b8991e937e45cdb848546a16df89f68712672376c490e0e6cc58d8e
-
SHA512
8ec3065c25eb525a95e692bc1a2ad05c2422ed3217d755ab120fc3d0a2df7edfba01d6213ada46fd574f790895b709f02aac73c3f405b2fe5f45a2516eb973e6
-
SSDEEP
12288:vDNSFzi87LGYvJ0fHL4s4iBkGkGhtelFr:vDNSFzDmYR0fHL4s7BSGhtsFr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbf45c079b8991e937e45cdb848546a16df89f68712672376c490e0e6cc58d8e
Files
-
dbf45c079b8991e937e45cdb848546a16df89f68712672376c490e0e6cc58d8e.dll windows:6 windows x86 arch:x86
bda5f14dfba5b3ff868fdc0ad1585ff4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameW
WritePrivateProfileStringW
GetFileType
LockResource
RemoveDirectoryW
GetSystemInfo
FindNextFileW
GetStringTypeW
CloseHandle
GetWindowsDirectoryW
OpenFileMappingA
TlsFree
GetTempFileNameW
CreateFileW
EnumSystemLocalesW
GetCurrentThread
TlsSetValue
FormatMessageW
GetOverlappedResult
EnumResourceNamesW
UnmapViewOfFile
SetHandleInformation
SignalObjectAndWait
VirtualFree
GetACP
EnterCriticalSection
CreateFileMappingA
FindNextFileA
DeleteCriticalSection
SuspendThread
GetUserDefaultLangID
GetExitCodeProcess
lstrcpyW
GetConsoleCP
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
LoadLibraryExW
HeapReAlloc
SetFilePointerEx
ReadFile
GetConsoleMode
WriteFile
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStdHandle
HeapSize
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetProcessHeap
IsDebuggerPresent
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetVersionExW
CreateEventA
VirtualQueryEx
GetTickCount
GetCurrentProcess
EnumCalendarInfoW
FindResourceW
MapViewOfFile
GetThreadTimes
EnumResourceTypesW
IsDBCSLeadByteEx
FlushFileBuffers
GetPrivateProfileIntW
LoadLibraryW
FileTimeToSystemTime
WideCharToMultiByte
GetEnvironmentStringsW
SystemTimeToFileTime
SetDllDirectoryW
SetEndOfFile
GetDriveTypeW
GetEnvironmentVariableW
GetCPInfoExW
EncodePointer
LCMapStringW
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsGetValue
TlsAlloc
DecodePointer
LeaveCriticalSection
MultiByteToWideChar
GetLastError
HeapFree
GetCommandLineA
GetCurrentThreadId
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
user32
GetWindowLongW
GetWindowTextW
DestroyCursor
MapWindowPoints
DrawFrameControl
GetMonitorInfoW
GetMenuItemInfoW
CharUpperW
ToUnicode
SetDlgItemTextW
GetKeyState
SetDlgItemInt
GetMenu
SendDlgItemMessageW
DrawMenuBar
InsertMenuW
DestroyIcon
GetWindowThreadProcessId
CharLowerBuffW
GetDlgItemInt
CharUpperBuffW
IsIconic
GetSubMenu
LoadStringA
GetDC
MessageBoxA
LoadMenuW
MonitorFromWindow
GetDesktopWindow
GetMenuItemCount
gdi32
GetNearestPaletteIndex
Arc
Ellipse
CreatePatternBrush
SetWinMetaFileBits
ExtFloodFill
SetTextColor
GetEnhMetaFileHeader
GetRegionData
GetCharABCWidthsW
PlayEnhMetaFile
SetPolyFillMode
SetStretchBltMode
PtInRegion
comdlg32
GetOpenFileNameW
advapi32
SetSecurityDescriptorOwner
RegDeleteKeyA
RegQueryInfoKeyW
RegQueryValueExW
SetSecurityDescriptorDacl
LookupPrivilegeValueW
shell32
ExtractIconExW
SHGetFileInfoW
oleaut32
VariantChangeType
VariantCopy
SafeArrayGetUBound
SysFreeString
SafeArrayPtrOfIndex
Sections
.text Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 814KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ