Static task
static1
Behavioral task
behavioral1
Sample
16ed2cb4ec3a55898e701165c4fcf702abfecd1b8fc1a8fa9c37bc8bb4570298.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16ed2cb4ec3a55898e701165c4fcf702abfecd1b8fc1a8fa9c37bc8bb4570298.dll
Resource
win10v2004-20240704-en
General
-
Target
16ed2cb4ec3a55898e701165c4fcf702abfecd1b8fc1a8fa9c37bc8bb4570298.dll
-
Size
2.5MB
-
MD5
fa3fda62bd5eee55b1f3c5cbf1c75554
-
SHA1
c41456ec628e71ca8f40fee6b2539ac1de84c7b6
-
SHA256
16ed2cb4ec3a55898e701165c4fcf702abfecd1b8fc1a8fa9c37bc8bb4570298
-
SHA512
9a8839e76cd70dc09cd9d7b1c77b3d978f4ff92110cc3322df34d2a18edc913b8ffb23e26d8254e1b3534cbda81f09628e6d8db5aaa810d216d476f8b6267506
-
SSDEEP
49152:T3ns9YTAjiBid2wDh0IsrxEtehefSxXwqkslcpEvT0n9:rfTciB+2wDharKeQqZksrb09
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ed2cb4ec3a55898e701165c4fcf702abfecd1b8fc1a8fa9c37bc8bb4570298.dll
Files
-
16ed2cb4ec3a55898e701165c4fcf702abfecd1b8fc1a8fa9c37bc8bb4570298.dll.dll windows:5 windows x86 arch:x86
96ead47adbf8ce95c1a9fe6413dfb704
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
CryptDestroyKey
DeleteService
version
VerQueryValueA
msvcrt
memset
user32
ToAsciiEx
SetMenu
ShowCaret
LoadAcceleratorsW
UnregisterHotKey
gdi32
FillPath
GetNearestColor
GetMetaFileA
kernel32
GetSystemInfo
DebugActiveProcess
GlobalDeleteAtom
GetConsoleCP
SetCommConfig
SetThreadPriority
GetBinaryTypeA
GetModuleFileNameA
LoadLibraryW
GetSystemTimeAsFileTime
OutputDebugStringA
LoadLibraryExA
LoadLibraryExW
winmm
waveInGetDevCapsA
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 344KB - Virtual size: 341KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dJikU40 Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XJv48hjo Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ