Static task
static1
Behavioral task
behavioral1
Sample
9310a4326cfeb8e7791ee11fa7c8e3d0N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9310a4326cfeb8e7791ee11fa7c8e3d0N.dll
Resource
win10v2004-20240802-en
General
-
Target
9310a4326cfeb8e7791ee11fa7c8e3d0N.exe
-
Size
2.0MB
-
MD5
9310a4326cfeb8e7791ee11fa7c8e3d0
-
SHA1
7591391ed57255f97524fc49cd82d3015010d731
-
SHA256
2d8e307261c2199bdb161dd0ebd0ddcd8d676ae757d0b0c90ce55f649c337e4c
-
SHA512
a8b91363c5620cf41e990f5a867cbaeba679cea9328d6ebcd8c598eaa7ab9dd07042d7e83bf53a508cfeb71053b9098797c7d05203c424a2660f3e1bba55c4d7
-
SSDEEP
49152:9fkqZnMmK6ykADEaCdidDkBV/aY2doTzeEN6q+D:9Xj6kAwaURahd+a4+D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9310a4326cfeb8e7791ee11fa7c8e3d0N.exe
Files
-
9310a4326cfeb8e7791ee11fa7c8e3d0N.exe.dll windows:5 windows x86 arch:x86
b343508d00e2ace00aad175e8890adc1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
winmm
waveOutGetPosition
waveOutGetVolume
secur32
FreeContextBuffer
user32
PostQuitMessage
DlgDirListA
OpenWindowStationW
UpdateWindow
ToAscii
GetWindowRgnBox
GetLastInputInfo
InvalidateRect
shlwapi
StrChrW
ole32
CreateAntiMoniker
esent
JetInit2
netapi32
NetUserEnum
gdi32
Chord
WidenPath
CombineRgn
GetClipBox
wininet
GetUrlCacheEntryInfoExA
avifil32
AVIStreamLength
shell32
SHSetLocalizedName
winspool.drv
AddPrinterDriverW
comdlg32
ReplaceTextA
rpcrt4
RpcServerTestCancel
mscms
DisassociateColorProfileFromDeviceW
msvcrt
putc
fgets
fgetpos
kernel32
GetProcAddress
LocalReAlloc
GetModuleHandleW
GetProcessHeap
LoadLibraryExA
GetModuleFileNameA
HeapWalk
advapi32
RegCloseKey
ws2_32
gethostbyaddr
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 192KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ