Static task
static1
Behavioral task
behavioral1
Sample
0a659d5bb75bbd00e6172f2126ab8fff0e35c45275074109b29c809826a541c4.dll
Resource
win7-20240704-en
General
-
Target
0a659d5bb75bbd00e6172f2126ab8fff0e35c45275074109b29c809826a541c4.dll
-
Size
236KB
-
MD5
054fe8737240e1c7a9ac9c271fa9cdce
-
SHA1
4a3d6a022223757db803dcf0aa47aab0c4f10eee
-
SHA256
0a659d5bb75bbd00e6172f2126ab8fff0e35c45275074109b29c809826a541c4
-
SHA512
4b31d170a495abbde9e4f119fd5974f3d6edd32a2db837308f28edb4929d068363ee15e2e2bcb366b4923e4f40288d5256ad8ec80787e75c5d5385e4bcfc3b78
-
SSDEEP
6144:g1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:g1GmSafShjYdd96z/6cwdC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a659d5bb75bbd00e6172f2126ab8fff0e35c45275074109b29c809826a541c4.dll
Files
-
0a659d5bb75bbd00e6172f2126ab8fff0e35c45275074109b29c809826a541c4.dll.dll windows:5 windows x86 arch:x86
ed2860c18f5483e3b5388bad75169dc1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegSaveKeyExA
AccessCheckAndAuditAlarmA
kernel32
SetWaitableTimer
GetModuleHandleA
LCIDToLocaleName
GetModuleHandleW
LoadLibraryExW
OutputDebugStringA
LoadLibraryExA
LoadLibraryA
winspool.drv
FindClosePrinterChangeNotification
setupapi
SetupDiInstallClassW
msvcrt
isspace
user32
GetFocus
ScrollWindow
CloseWindow
ole32
HMENU_UserFree
shlwapi
PathIsUNCW
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.datA Size: 124KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 440B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ