OoItsndxha
Static task
static1
Behavioral task
behavioral1
Sample
a7f8d522b8a0618f286b9ff09097880589b364fec8be21789637cebeb5832447.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a7f8d522b8a0618f286b9ff09097880589b364fec8be21789637cebeb5832447.dll
Resource
win10v2004-20240802-en
General
-
Target
a7f8d522b8a0618f286b9ff09097880589b364fec8be21789637cebeb5832447.dll
-
Size
1.6MB
-
MD5
856d6d6096b874f5d0cf46b2e74fc1af
-
SHA1
a7dd4e3249108d97ba92cb3362eab335a386c1e7
-
SHA256
a7f8d522b8a0618f286b9ff09097880589b364fec8be21789637cebeb5832447
-
SHA512
64f44caf19142e251a053ff6ebe31969c379072f9e5f3bdbf4c10b3251bd1e766a68e0b6655d271edaa6fc5efdc8d3a078c5a3d64fe0ff993688cd2f6de7695e
-
SSDEEP
24576:16eafLdUJNhucC9VydbrT+Ip4d+NZzunC7jfM/EOCFx9derPf1ND9/e7:s7LdUXIcxdHT+I4/nd8Jr2fvy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7f8d522b8a0618f286b9ff09097880589b364fec8be21789637cebeb5832447.dll
Files
-
a7f8d522b8a0618f286b9ff09097880589b364fec8be21789637cebeb5832447.dll.dll windows:5 windows x86 arch:x86
79119896469024f539c528df6c348183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
rpcrt4
RpcServerUseProtseqEpExW
psapi
GetModuleFileNameExW
lz32
GetExpandedNameW
kernel32
VirtualAlloc
GetFileSize
GetLargestConsoleWindowSize
CancelWaitableTimer
LoadLibraryExA
LoadLibraryA
GetModuleFileNameA
user32
MonitorFromRect
IsWindowVisible
GetClipboardOwner
ActivateKeyboardLayout
RegisterShellHookWindow
iphlpapi
CancelIPChangeNotify
advapi32
CryptEnumProviderTypesW
gdi32
StrokeAndFillPath
SetViewportOrgEx
comctl32
ImageList_GetIcon
Exports
Exports
Sections
.text Size: 368KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
hxBVr4KZ Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1008B
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ