StartW
Static task
static1
Behavioral task
behavioral1
Sample
7f83819841eff047bafda736cefbc2ba6c6aa258eff6bd5162eeaefdde498ced.dll
Resource
win7-20240704-en
General
-
Target
7f83819841eff047bafda736cefbc2ba6c6aa258eff6bd5162eeaefdde498ced
-
Size
544KB
-
MD5
2b2bff38cb28e0a22c30f6dd738ef555
-
SHA1
411b2f1ef5daf64894028f1521103127e4235c1a
-
SHA256
7f83819841eff047bafda736cefbc2ba6c6aa258eff6bd5162eeaefdde498ced
-
SHA512
2dfebff9aa439aaa3c9496d7e7ac38950eebccad65c2b924d71af620e40fd31271ed099d6b97e370b69fa3077c97ab50c5f2914ba5dcb3b5388c65bdcda9bf4d
-
SSDEEP
6144:6nhWubOStZ6AbgmgwLp3gUhWeGt1OPc/woVPHma1MXohuPATdTpNSTrbkYW412ph:6nTltgBNwxgUXS/DGaXhu45pI3rep
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f83819841eff047bafda736cefbc2ba6c6aa258eff6bd5162eeaefdde498ced
Files
-
7f83819841eff047bafda736cefbc2ba6c6aa258eff6bd5162eeaefdde498ced.dll windows:4 windows x86 arch:x86
f3deb6209dc9c95daaecc9f849af840f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LCMapStringW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
GetProfileStringA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetTimeZoneInformation
HeapSize
HeapReAlloc
GetACP
TerminateProcess
ExitProcess
RaiseException
HeapFree
GetCommandLineA
HeapAlloc
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryA
SizeofResource
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetProcessVersion
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
CloseHandle
GetModuleFileNameA
CreateProcessA
GlobalAlloc
GetCurrentThread
lstrcmpA
GlobalFree
SetLastError
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetCurrentThreadId
lstrcmpiA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcpyA
GlobalLock
GlobalUnlock
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
MulDiv
GetModuleHandleA
GetProcAddress
lstrlenA
MultiByteToWideChar
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
LoadLibraryW
GetCurrentProcess
user32
DefFrameProcA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
RedrawWindow
IsZoomed
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
CreateDialogIndirectParamA
EndDialog
PostQuitMessage
ShowOwnedPopups
ValidateRect
TranslateMessage
GetMessageA
CharUpperA
GetSysColorBrush
LoadStringA
GetClassNameA
FindWindowA
GetTabbedTextExtentA
InflateRect
GetDCEx
LockWindowUpdate
SetCapture
InvertRect
InsertMenuA
GetMenuStringA
DestroyIcon
ClientToScreen
WindowFromPoint
KillTimer
SetTimer
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
RegisterClassA
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
DestroyWindow
CreateWindowExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
GrayStringA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetLastActivePopup
BringWindowToTop
EqualRect
CopyRect
GetDlgItem
SetWindowLongA
SetWindowPos
GetMenuItemCount
GetMenuItemID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
GetMenu
LoadIconA
GetClassInfoA
DestroyMenu
SetFocus
GetActiveWindow
ShowWindow
GetWindowLongA
IsWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
GetCapture
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
GetDlgCtrlID
IsIconic
AdjustWindowRectEx
PeekMessageA
GetCursorPos
ScreenToClient
wsprintfA
InvalidateRect
PtInRect
FillRect
GetSysColor
SetRect
OffsetRect
EnableWindow
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
PostMessageA
EnumThreadWindows
GetSubMenu
IsChild
GetDC
ReleaseDC
ShowScrollBar
LoadCursorA
SetCursor
DestroyCursor
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
RemovePropA
GetWindowDC
GetParent
GetNextDlgTabItem
IsWindowVisible
UpdateWindow
SendMessageA
GetKeyState
GetClientRect
LoadMenuA
SetWindowsHookExA
gdi32
DeleteObject
GetCharWidthA
CreateFontA
CreateRectRgnIndirect
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
CreateCompatibleBitmap
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPoint32A
GetTextMetricsA
LPtoDP
GetBkColor
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
CreateFontIndirectA
GetTextFaceA
GetWindowOrgEx
SetRectRgn
CombineRgn
BitBlt
CreateCompatibleDC
SelectObject
StretchDIBits
GetObjectA
SetBkColor
SetTextColor
GetClipBox
DeleteDC
CreateDCA
SetAbortProc
StartDocA
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
CreatePen
DPtoLP
Rectangle
GetStockObject
PatBlt
GetDeviceCaps
CreateDIBitmap
GetTextExtentPointA
CreateBitmap
comdlg32
PrintDlgA
GetFileTitleA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegDeleteValueA
GetFileSecurityA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegCreateKeyA
SetFileSecurityA
RegSetValueExA
RegCreateKeyExA
shell32
SHGetFileInfoA
DragQueryFileA
DragFinish
ExtractIconA
comctl32
ord17
Exports
Exports
Sections
.text Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 248KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ