HbwjrliishhAinosu
Static task
static1
Behavioral task
behavioral1
Sample
848c02581b9bbb4db07a2320cf4d5d6b8db146e1873a6daff04db9746cc6dab7.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
848c02581b9bbb4db07a2320cf4d5d6b8db146e1873a6daff04db9746cc6dab7.dll
Resource
win10v2004-20240802-en
General
-
Target
848c02581b9bbb4db07a2320cf4d5d6b8db146e1873a6daff04db9746cc6dab7
-
Size
1.6MB
-
MD5
899fefad5b77d092534a408013e2eb8a
-
SHA1
c6ac68c0f4eff35d8e59c8a1a5a79919e0979476
-
SHA256
848c02581b9bbb4db07a2320cf4d5d6b8db146e1873a6daff04db9746cc6dab7
-
SHA512
4e3b2f8e290acb3f0f004b22599a19e0ff93a6ca7dbc5e1669decabce1b818eee4b359777a653bde1f318fef117515f71a658bd80299db032cfd386d112e8701
-
SSDEEP
49152:oif7Q+3wsTx2/SkpO57jQaxSM9mMmbQ3/9:pfMsTxlhUsSMonbc9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 848c02581b9bbb4db07a2320cf4d5d6b8db146e1873a6daff04db9746cc6dab7
Files
-
848c02581b9bbb4db07a2320cf4d5d6b8db146e1873a6daff04db9746cc6dab7.dll windows:5 windows x86 arch:x86
e118956402da5a8c64fb37dd02fd44cf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetBinaryTypeW
GlobalAlloc
GlobalMemoryStatus
EraseTape
SetEndOfFile
ReadConsoleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
GetModuleFileNameW
RtlUnwind
OutputDebugStringA
advapi32
CloseEventLog
user32
GetDlgItemTextA
GetSystemMetrics
GetClientRect
crypt32
CryptSIPPutSignedDataMsg
shlwapi
StrChrNW
ole32
OleCreateMenuDescriptor
Exports
Exports
Sections
.text Size: 664KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EXP Size: 4KB - Virtual size: 140B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code0 Size: 912KB - Virtual size: 910KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ