ExportFunction
Static task
static1
Behavioral task
behavioral1
Sample
d66b8f803154c7f7e58aed5507b4bd11fd3e9e8f2550e4eda1b995849c7a8e45.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d66b8f803154c7f7e58aed5507b4bd11fd3e9e8f2550e4eda1b995849c7a8e45.dll
Resource
win10v2004-20240802-en
General
-
Target
d66b8f803154c7f7e58aed5507b4bd11fd3e9e8f2550e4eda1b995849c7a8e45
-
Size
427KB
-
MD5
caafc14c58b60dfd934e3d97a8c47a9f
-
SHA1
28206ed6fea207130704d5b3e0c30c08d22a8ec7
-
SHA256
d66b8f803154c7f7e58aed5507b4bd11fd3e9e8f2550e4eda1b995849c7a8e45
-
SHA512
a9948315b28c15ab4c7753539a0025b353f945a31f82c662f2d93701121cf9b9e3d9e87dfd77259db07bc859daa6f12157bff5c99047e7134e096c252c5d0b73
-
SSDEEP
1536:1dT/bOBvnXzyTn25XZKz6ctkzIph3wessmPr1if/959M8Rx4WA:1Fid7AzKJessmk959l/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d66b8f803154c7f7e58aed5507b4bd11fd3e9e8f2550e4eda1b995849c7a8e45
Files
-
d66b8f803154c7f7e58aed5507b4bd11fd3e9e8f2550e4eda1b995849c7a8e45.dll windows:5 windows x86 arch:x86
b136e601b93c43612bff8d453c67c0f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
wsprintfA
EnumChildWindows
GetWindow
PostMessageA
GetWindowThreadProcessId
shell32
SHGetSpecialFolderPathA
advapi32
OpenProcessToken
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
kernel32
SetHandleCount
GetModuleFileNameA
CreateThread
GetComputerNameA
LoadLibraryA
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
GetLastError
CloseHandle
lstrcatA
GetShortPathNameA
GetTempPathA
WinExec
GetLocalTime
CreateMutexA
Sleep
FreeLibrary
DeleteFileA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
RaiseException
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
ExitProcess
WriteFile
SetStdHandle
SetFilePointer
MultiByteToWideChar
ReadFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapSize
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Exports
Exports
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.shell Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ