Static task
static1
Behavioral task
behavioral1
Sample
ae14fd5f3f46c3127caf9c72619bfb956de857229942cc73f6187da7a5f64177.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ae14fd5f3f46c3127caf9c72619bfb956de857229942cc73f6187da7a5f64177.dll
Resource
win10v2004-20240802-en
General
-
Target
ae14fd5f3f46c3127caf9c72619bfb956de857229942cc73f6187da7a5f64177
-
Size
2.3MB
-
MD5
ea77f6f457bbc7efc293509681f74ce4
-
SHA1
93f902763f5ca822ec2175cb5afffb26943b35c6
-
SHA256
ae14fd5f3f46c3127caf9c72619bfb956de857229942cc73f6187da7a5f64177
-
SHA512
7035ccfa4ec0dd8ca562684be2a01f3287f9bbb61140f69583d9f0f0b91f1670b00afc25715ab01c0f193586233b0c11c4231dde94ea773e8b69cc00713a0077
-
SSDEEP
49152:uLHpq12eT7VLhYNqSTV6PwydPmgQrxv4d7Dgez:uLJqthYgSB6YydPmgc4dfge
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae14fd5f3f46c3127caf9c72619bfb956de857229942cc73f6187da7a5f64177
Files
-
ae14fd5f3f46c3127caf9c72619bfb956de857229942cc73f6187da7a5f64177.dll windows:5 windows x86 arch:x86
8b350362e80aae4090e9fd2ab3f37597
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
imm32
ImmDestroyContext
advapi32
OpenEventLogW
urlmon
FindMimeFromData
gdi32
PtInRegion
rasapi32
RasGetSubEntryPropertiesW
shlwapi
StrCpyNW
kernel32
GetModuleHandleW
GetLastError
GetBinaryTypeW
GetFileTime
GetModuleFileNameW
EnterCriticalSection
mprapi
MprAdminMIBEntryGet
user32
GetUpdateRgn
OemToCharBuffW
HiliteMenuItem
shell32
DragQueryFileW
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 712KB - Virtual size: 710KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erloc Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ