Static task
static1
Behavioral task
behavioral1
Sample
d11a6b623af75e54374bea05172b2193f93e2a8aa479ed13a7b1d19dd3738245.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d11a6b623af75e54374bea05172b2193f93e2a8aa479ed13a7b1d19dd3738245.dll
Resource
win10v2004-20240802-en
General
-
Target
57c5d2950f3b91f96c81ae32e1b01a44.bin
-
Size
6.0MB
-
MD5
fbc26f99459ed677056e0b6f48a777b4
-
SHA1
eb9f439c8ab6d894ab910c62150c0f7b08435d97
-
SHA256
34b6308eb113d31a54444b925d6fb374d6718f93168f28d3d6e1a54bca9165d1
-
SHA512
a44ac0ae4513016db41a24c6865b89f964cd4615610bfe0367f997ef39661132ecb7599b6f52cafb66d4c3aab6aae7621ea276228f90298769040abc42d7257a
-
SSDEEP
98304:WLB2aVnghihowdZ1DXxzlFN0H2vK5o5X6pazIEedxV1rkmRQJeELnQ66eF5xmrHd:mB2Vhii6tTvL5XkxH9i6SbQH5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d11a6b623af75e54374bea05172b2193f93e2a8aa479ed13a7b1d19dd3738245.dll
Files
-
57c5d2950f3b91f96c81ae32e1b01a44.bin.zip
Password: infected
-
d11a6b623af75e54374bea05172b2193f93e2a8aa479ed13a7b1d19dd3738245.dll.dll windows:6 windows x86 arch:x86
Password: infected
f97432a3249488bbad6577e538ae4c50
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapSize
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsFree
GetProcessHeap
IsDebuggerPresent
IsValidCodePage
GetOEMCP
GetStdHandle
GetFileType
GetModuleFileNameA
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteFile
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
LoadLibraryExW
OutputDebugStringW
SetStdHandle
WriteConsoleW
ReadConsoleW
LocalFree
GetEnvironmentVariableW
CreatePipe
CreateFileMappingA
ResetEvent
GetACP
GetProcessTimes
GetWindowsDirectoryA
GlobalLock
GetCurrentProcess
FreeLibrary
TlsGetValue
DeleteFileA
LoadLibraryA
FindClose
FindFirstFileA
RaiseException
CreateFileW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
TlsSetValue
TlsAlloc
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapReAlloc
GetSystemTimeAsFileTime
HeapFree
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
Sleep
TerminateProcess
user32
CheckMenuItem
ToAsciiEx
SetCapture
IsZoomed
LoadStringA
DeleteMenu
GetParent
MessageBeep
DrawEdge
CreateIconIndirect
DrawFocusRect
ShowCursor
ReleaseDC
EnableMenuItem
ScrollWindow
RedrawWindow
CreatePopupMenu
CreateCaret
RemoveMenu
SetCaretPos
DrawFrameControl
TranslateMDISysAccel
SetWindowRgn
SendDlgItemMessageA
GetDC
GetQueueStatus
GetWindowTextA
GetScrollInfo
UnionRect
UnregisterClassA
SystemParametersInfoW
SetClassLongA
GetDesktopWindow
IsDlgButtonChecked
DrawMenuBar
GetSystemMetrics
ValidateRgn
DialogBoxParamA
GetCaretBlinkTime
gdi32
PolyPolygon
MaskBlt
SetPixel
CreateCompatibleDC
PlayEnhMetaFile
CombineRgn
RectInRegion
Rectangle
Ellipse
SaveDC
SetPolyFillMode
GetCurrentPositionEx
GetDIBColorTable
SetStretchBltMode
CreatePatternBrush
GetClipBox
SetTextAlign
CreateDIBitmap
GetPixel
SetWindowOrgEx
Arc
GetTextExtentPoint32A
SetWindowExtEx
SetTextColor
CreateHatchBrush
CreateFontA
GetDIBits
SetBkColor
ExcludeClipRect
CreateHalftonePalette
DeleteObject
SelectObject
GetCharABCWidthsFloatA
SetViewportExtEx
GetStockObject
CloseEnhMetaFile
RestoreDC
UpdateColors
GetTextExtentExPointA
advapi32
AllocateAndInitializeSid
RegCloseKey
RegOpenKeyExA
CopySid
ole32
CoTaskMemFree
Sections
.text Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ