Static task
static1
Behavioral task
behavioral1
Sample
63bcc0e4f930b2d2466d3b5ebb9ce91b18efad3da68b436967824c5615169b88.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63bcc0e4f930b2d2466d3b5ebb9ce91b18efad3da68b436967824c5615169b88.dll
Resource
win10v2004-20240802-en
General
-
Target
63bcc0e4f930b2d2466d3b5ebb9ce91b18efad3da68b436967824c5615169b88
-
Size
6.5MB
-
MD5
588ae5ce847148a868b614cdc82f21d7
-
SHA1
afac9feb133dde1b5b0282e95187113822306c05
-
SHA256
63bcc0e4f930b2d2466d3b5ebb9ce91b18efad3da68b436967824c5615169b88
-
SHA512
9b8645a42f61e44261105fac86d6045f2f969bf0420d670206f473ba244ed2e786146d0ee12db31d123b74d95a21aac0b6c45fa21b65fab5e4c6f40933567fd1
-
SSDEEP
98304:iDeqlHgOh3kQhlUeExAyvo+jQPNIyWZg/Br+P2nf3nazzRZRXYAmedCxdCzoy3XF:SwwfiMFITK/BK2f3A1ZNYedYEoyF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63bcc0e4f930b2d2466d3b5ebb9ce91b18efad3da68b436967824c5615169b88
Files
-
63bcc0e4f930b2d2466d3b5ebb9ce91b18efad3da68b436967824c5615169b88.dll windows:6 windows x86 arch:x86
a53335e661b7c894d3ebe0bda66cc209
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetCommTimeouts
GetFileAttributesA
HeapCreate
lstrcpynW
IsProcessorFeaturePresent
CreateProcessA
GetSystemDirectoryA
CreateFileW
CompareStringW
GlobalUnlock
FlushFileBuffers
FindFirstFileA
GetLastError
SetLastError
IsValidCodePage
EnterCriticalSection
ResetEvent
RemoveDirectoryW
DeviceIoControl
GetSystemInfo
CreatePipe
GetModuleHandleA
FindNextFileW
TlsAlloc
CloseHandle
GetWindowsDirectoryW
DeleteFileW
TlsFree
SuspendThread
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
GetConsoleScreenBufferInfo
ConnectNamedPipe
GetStdHandle
Sleep
SetConsoleTextAttribute
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleW
SetStdHandle
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
WriteFile
OutputDebugStringW
GetOEMCP
GetACP
IsDebuggerPresent
GetProcessHeap
HeapSize
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
SetCommBreak
GetUserDefaultLCID
GetLocaleInfoA
CompareFileTime
LoadLibraryExW
FreeLibrary
UnmapViewOfFile
FindFirstFileW
GetDateFormatW
ExitProcess
QueryDosDeviceW
RaiseException
GetOverlappedResult
Beep
GetExitCodeProcess
LeaveCriticalSection
CreateEventA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GlobalLock
EnumCalendarInfoW
SetDllDirectoryW
VirtualQuery
GetDriveTypeW
SetConsoleCursorPosition
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsSetValue
TlsGetValue
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
EncodePointer
DecodePointer
DeleteCriticalSection
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
RtlUnwind
HeapFree
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
GetCommandLineA
GetCurrentThreadId
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetConsoleMode
user32
IsRectEmpty
DrawFrameControl
IsIconic
GetSubMenu
DrawIconEx
AttachThreadInput
GetMenuItemInfoW
LoadMenuW
GetWindowTextW
DrawStateW
DestroyIcon
DrawMenuBar
GetKeyboardType
SendMessageW
CharUpperW
CopyRect
GetWindow
ClientToScreen
PostMessageW
GetDC
GetMenu
CheckMenuRadioItem
GetClassNameW
SendDlgItemMessageW
GetDesktopWindow
EnumChildWindows
GetSysColorBrush
EnableScrollBar
gdi32
SetLayout
SetViewportOrgEx
GetMetaFileBitsEx
StretchBlt
GetEnhMetaFileHeader
GetRegionData
PtInRegion
OffsetRgn
SetPolyFillMode
CreateBitmapIndirect
CreatePolygonRgn
ExtFloodFill
GetObjectW
SetStretchBltMode
PlayEnhMetaFile
advapi32
RegUnLoadKeyW
ControlService
CloseServiceHandle
AdjustTokenPrivileges
SetSecurityDescriptorOwner
OpenSCManagerW
OpenProcessToken
shell32
ShellExecuteW
ole32
CoTaskMemFree
CoInitialize
oleaut32
SafeArrayGetUBound
VariantChangeType
SysReAllocStringLen
SysAllocStringLen
VariantClear
Sections
.text Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ