Static task
static1
Behavioral task
behavioral1
Sample
38098bb385b66141fa0437956022da5bf14df75ffd66f23fe5d2c4b8503b3808.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
38098bb385b66141fa0437956022da5bf14df75ffd66f23fe5d2c4b8503b3808.dll
Resource
win10v2004-20240802-en
General
-
Target
38098bb385b66141fa0437956022da5bf14df75ffd66f23fe5d2c4b8503b3808
-
Size
1.4MB
-
MD5
8f46937f50529390fd12a173c4b1be22
-
SHA1
9235246e0c4b4ef296f64f9c882449e3619ef69e
-
SHA256
38098bb385b66141fa0437956022da5bf14df75ffd66f23fe5d2c4b8503b3808
-
SHA512
3b0931fde073168cb903809314b8813523af57a2a3dc011cd9dc39f1ddd1c924abd2cefbfa90df3f4458b9c18736fa39de3fab6ba560f80183cf12e5c5cbad51
-
SSDEEP
24576:nQ7a+jm+lo5NmEfJlMxkKW5ifsqJ1Wt/ahrYVHh34hyqNgWkkN:Qe+jmioH9f2kifJeyhmV4gNG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38098bb385b66141fa0437956022da5bf14df75ffd66f23fe5d2c4b8503b3808
Files
-
38098bb385b66141fa0437956022da5bf14df75ffd66f23fe5d2c4b8503b3808.dll windows:5 windows x86 arch:x86
3af1ee4ca157225d12804d02cf669d1f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DrawAnimatedRects
msvcrt
memset
shlwapi
StrRChrA
UrlCombineA
SHRegGetBoolUSValueW
ole32
CoQueryProxyBlanket
StgOpenStorageEx
avifil32
AVIFileGetStream
kernel32
GetUserDefaultLangID
SetCommConfig
SetEvent
GetTimeZoneInformation
OpenEventA
IsValidLocale
LockResource
SetDllDirectoryW
GetModuleFileNameA
GetBinaryTypeA
GetExitCodeThread
powrprof
ReadGlobalPwrPolicy
winscard
SCardGetStatusChangeW
gdi32
CreateCompatibleBitmap
GetPixel
OffsetRgn
RealizePalette
CloseEnhMetaFile
winspool.drv
EnumPrinterKeyW
setupapi
SetupVerifyInfFileW
SetupDiGetDeviceInstanceIdW
oleaut32
SysReAllocStringLen
VarR8FromI2
VarBstrCat
Sections
.text Size: 800KB - Virtual size: 799KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 204KB - Virtual size: 204KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ