HtttesvwohatTsb
Static task
static1
Behavioral task
behavioral1
Sample
cba320090fb146910326f439cb919d82649282fd7a65c42c46fbfa23d59f58ed.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
cba320090fb146910326f439cb919d82649282fd7a65c42c46fbfa23d59f58ed.dll
Resource
win10v2004-20240802-en
General
-
Target
cba320090fb146910326f439cb919d82649282fd7a65c42c46fbfa23d59f58ed
-
Size
2.5MB
-
MD5
7e135f49b6c47a227af0bfc6d76ed777
-
SHA1
f2c6ead5c2ac4bb5feb4df4e25109f08b30d5ec6
-
SHA256
cba320090fb146910326f439cb919d82649282fd7a65c42c46fbfa23d59f58ed
-
SHA512
5114eb7f21ca91e3ba9f8efe593e45688776e34135d890374883e45e01506f7f34e9b8985fe4d3c0b8518f6bc91fc339b504870c4e01dba94131caa4e1519a76
-
SSDEEP
49152:vTwz9w9eBLCX1N5mkNGVUwRiSoASnr9K+aZtDjBuSE1CRhqw4zuw0iGqnnA:vTZRFN5XMVUwRiS2xPcBj4S0CRh8zh0C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cba320090fb146910326f439cb919d82649282fd7a65c42c46fbfa23d59f58ed
Files
-
cba320090fb146910326f439cb919d82649282fd7a65c42c46fbfa23d59f58ed.dll windows:5 windows x86 arch:x86
69cfd588f42b2733b656907ee4aec396
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gdi32
CreateFontA
ole32
OleGetClipboard
iphlpapi
GetNumberOfInterfaces
imm32
ImmGetCandidateListW
kernel32
GetSystemTimeAsFileTime
GetBinaryTypeA
GetCurrencyFormatA
QueryPerformanceCounter
IsProcessorFeaturePresent
CloseHandle
GetModuleFileNameA
OutputDebugStringA
ReadConsoleW
user32
CloseDesktop
PostQuitMessage
msvcrt
strspn
avifil32
AVIFileGetStream
msvfw32
ICLocate
Exports
Exports
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.crt1 Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 432KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Px3z7 Size: 536KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bI6k Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 864B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ