Static task
static1
Behavioral task
behavioral1
Sample
d71a146da1c9fbb9d8d8ded4156f7a6a4010a7d778e2f4274e2d066aa04b7dc3.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d71a146da1c9fbb9d8d8ded4156f7a6a4010a7d778e2f4274e2d066aa04b7dc3.dll
Resource
win10v2004-20240709-en
General
-
Target
d71a146da1c9fbb9d8d8ded4156f7a6a4010a7d778e2f4274e2d066aa04b7dc3
-
Size
2.2MB
-
MD5
d095758c987cf0ef5f155e9326d1f4f1
-
SHA1
dc6d29ed89946e2a2d3c38b4dc8c6d9d1725fde6
-
SHA256
d71a146da1c9fbb9d8d8ded4156f7a6a4010a7d778e2f4274e2d066aa04b7dc3
-
SHA512
60635a40434bba572a98fec72eae097c4875bc06a82cc758e4e169df064af3090a7ecb45051ad39909d48668a543ee52027660d20cc2accafe38dfcfabbf3381
-
SSDEEP
49152:dOh1r+FmMfAPgOPgRxSrsVbgrjmu3aWw1TMnUmVcpL:dQU5f++RxMwbgrj93aWGT2ipL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d71a146da1c9fbb9d8d8ded4156f7a6a4010a7d778e2f4274e2d066aa04b7dc3
Files
-
d71a146da1c9fbb9d8d8ded4156f7a6a4010a7d778e2f4274e2d066aa04b7dc3.dll windows:5 windows x86 arch:x86
e984b8f7dd9751310a7a9468022ea038
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
StrChrIA
advapi32
RegOverridePredefKey
CloseServiceHandle
AllocateLocallyUniqueId
RegGetKeySecurity
kernel32
OutputDebugStringA
FillConsoleOutputAttribute
SetConsoleTextAttribute
GetStringTypeW
LockFile
GetThreadLocale
LockFileEx
SetThreadExecutionState
SetUnhandledExceptionFilter
GetBinaryTypeW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
GetModuleFileNameW
HeapCreate
IsDebuggerPresent
ole32
CoCancelCall
user32
AdjustWindowRect
InvalidateRgn
DrawIconEx
CreatePopupMenu
GetUpdateRgn
ScreenToClient
CreateIconIndirect
gdi32
BeginPath
ResizePalette
StartPage
GetNearestPaletteIndex
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EXP Size: 4KB - Virtual size: 39B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 832KB - Virtual size: 829KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ