Static task
static1
Behavioral task
behavioral1
Sample
d4024f73874418a45763386190ddcd90N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4024f73874418a45763386190ddcd90N.dll
Resource
win10v2004-20240910-en
General
-
Target
d4024f73874418a45763386190ddcd90N
-
Size
62KB
-
MD5
d4024f73874418a45763386190ddcd90
-
SHA1
b34f7f8529636bbfebbb362119f5dca5f51983dc
-
SHA256
def85f034d6825634215c3093fddd28929c209a43f887de7487a65e608d145a0
-
SHA512
7038790d029330353859392dfa68bc80aaf36c7338850cc5565aaf06b424f941105c2e6008ffb4da456da524eb12c9b67db577392ce39724bbb6d4b880650b79
-
SSDEEP
1536:z20hSUNdvQwQS/wn2EwTEInuOmqdi4RO+C99ju:z/VRp//II3d5RO+u9ju
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4024f73874418a45763386190ddcd90N
Files
-
d4024f73874418a45763386190ddcd90N.dll windows:4 windows x86 arch:x86
5c2d4b2511878352051f70d16c181ea0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
OffsetRect
MessageBoxIndirectW
GetMessageW
FillRect
EmptyClipboard
kernel32
ExitProcess
CompareStringW
GetTimeZoneInformation
advapi32
RegEnumValueW
RegQueryValueExW
RegCloseKey
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ