Static task
static1
Behavioral task
behavioral1
Sample
b96bf8ac4c10da8cb5e45e8866e9129314c4ef4c89c737b040cd1403fecd0172.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b96bf8ac4c10da8cb5e45e8866e9129314c4ef4c89c737b040cd1403fecd0172.dll
Resource
win10v2004-20240704-en
General
-
Target
b96bf8ac4c10da8cb5e45e8866e9129314c4ef4c89c737b040cd1403fecd0172
-
Size
2.4MB
-
MD5
15032bcbb5a679d24076f5ad50074d86
-
SHA1
47829bed2a023eeab097cf1fdb9e44a5d5bdef8f
-
SHA256
b96bf8ac4c10da8cb5e45e8866e9129314c4ef4c89c737b040cd1403fecd0172
-
SHA512
822f131611be28fdae9815b3dd319f8619b2422404e39874013453609b84253f4dd576e3d71637db906afb14bfded1f841db3283a4dd0114f2d87aedd9dccaf4
-
SSDEEP
49152:rbzGp8HST+dAoZLr1MkU3XXLqQ9bTRYfy3/6FUjXlK1m:rWp8HSe/LrOjGQ9bWKiFuXEm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b96bf8ac4c10da8cb5e45e8866e9129314c4ef4c89c737b040cd1403fecd0172
Files
-
b96bf8ac4c10da8cb5e45e8866e9129314c4ef4c89c737b040cd1403fecd0172.dll windows:5 windows x86 arch:x86
0eaa84bf8d0ebf97a44ff287f05e6d08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DeleteMenu
IsCharLowerW
TabbedTextOutA
kernel32
LoadLibraryExW
GetBinaryTypeA
LoadLibraryExA
CancelIo
AssignProcessToJobObject
GetModuleFileNameA
OutputDebugStringA
GetSystemTimeAsFileTime
LoadLibraryW
version
GetFileVersionInfoSizeA
winmm
midiOutSetVolume
advapi32
InitializeAcl
gdi32
SetROP2
FlattenPath
SelectClipPath
Chord
AddFontResourceExA
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 204KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 304KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dJikU40 Size: 244KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XJv48hjo Size: 380KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_MEM_READ
.reloc Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ