Static task
static1
Behavioral task
behavioral1
Sample
232a3a6d4551622a0d9c16e13b222360N.dll
Resource
win7-20240903-en
General
-
Target
232a3a6d4551622a0d9c16e13b222360N
-
Size
176KB
-
MD5
232a3a6d4551622a0d9c16e13b222360
-
SHA1
26e35570ddae83ccf0b8529b210bb166d1eac9fd
-
SHA256
3fbc35ba56bf87c89cae60eb2d23a26559e4e3357d6eb3c38e8242791d40b7d9
-
SHA512
f094e90a94cd2c38e9bbdc1a55a5c095955c8eb3f9897a089ec66b0027bc78c4ea2ef621b6e64eca7ff7ec87964e292231bcf8a58129d5dec2bd86d8f2ff013b
-
SSDEEP
3072:gkuFv+1jFURSOOAONTxyUMN4lmg1sHednTLPfUTuIzMCIlpJDa9:gk+v+veSFrNT8V4sH0n/nGz8rJW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 232a3a6d4551622a0d9c16e13b222360N
Files
-
232a3a6d4551622a0d9c16e13b222360N.dll windows:5 windows x86 arch:x86
d2e71574e041d342d08ebd0a80b4ac65
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
winspool.drv
AddPrinterA
version
GetFileVersionInfoSizeW
clusapi
ClusterRegSetValue
user32
LoadIconA
IsRectEmpty
GetFocus
SetScrollPos
MapVirtualKeyA
setupapi
CM_Get_Res_Des_Data_Ex
ole32
OleGetClipboard
winmm
GetDriverModuleHandle
kernel32
GetModuleHandleW
LoadLibraryW
CreateToolhelp32Snapshot
CreateMailslotA
DeactivateActCtx
GetModuleHandleA
FileTimeToDosDateTime
advapi32
InitiateSystemShutdownW
SetUserFileEncryptionKey
RegSaveKeyExA
gdi32
ResetDCA
AngleArc
BeginPath
oleaut32
VarI4FromR4
iphlpapi
GetNumberOfInterfaces
Sections
.rdata0 Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Rdata Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.qdata Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt3 Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 683B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ