Static task
static1
Behavioral task
behavioral1
Sample
d732b8eb671e1c081ae5ad82a0d90a60N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d732b8eb671e1c081ae5ad82a0d90a60N.dll
Resource
win10v2004-20240802-en
General
-
Target
d732b8eb671e1c081ae5ad82a0d90a60N
-
Size
114KB
-
MD5
d732b8eb671e1c081ae5ad82a0d90a60
-
SHA1
130d17d825eaff24c02b388568e0ffb3d7a76289
-
SHA256
a20c1f02ec7e4726e8c0de8cba8ede609f4887eeb76717e5ebfb7d53475136b6
-
SHA512
aae1e7b1159f7254cb3e08743b71bf4dda550acc041665432fb58d816af9918e785e9e27870b5b2864296c0721f00109b57868a4f11abcd3ffa907f7547ca9b8
-
SSDEEP
3072:GrGsRPEVx36URhvXp7ewH+N5/O8FV72eg:lGURdI9m8FVS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d732b8eb671e1c081ae5ad82a0d90a60N
Files
-
d732b8eb671e1c081ae5ad82a0d90a60N.dll windows:4 windows x86 arch:x86
410e36092dee8b7c1a5f607824baae1a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapFree
SetMailslotInfo
CloseConsoleHandle
DeleteFiber
WriteConsoleInputW
SetEnvironmentVariableW
GetDefaultCommConfigA
EnumResourceNamesW
LocalShrink
IsBadReadPtr
FreeEnvironmentStringsW
GetQueuedCompletionStatus
GetTempPathW
GetCurrentDirectoryA
SwitchToThread
SetCommTimeouts
ExpungeConsoleCommandHistoryW
FlushConsoleInputBuffer
GetNextVDMCommand
AllocConsole
FillConsoleOutputAttribute
SetLastError
GetBinaryTypeW
CloseHandle
WaitCommEvent
WritePrivateProfileStructW
BackupRead
GetNumberFormatW
SetConsoleHardwareState
MapViewOfFile
GetCurrentThreadId
SetThreadLocale
VirtualLock
AddAtomA
GetEnvironmentStringsW
GetComputerNameW
TlsSetValue
SetConsoleOutputCP
VirtualAlloc
ConsoleMenuControl
GetThreadPriorityBoost
user32
CreateAcceleratorTableW
DrawStateA
IsDialogMessageA
SetMenuItemInfoA
SwapMouseButton
LoadStringW
GetClassInfoA
DefFrameProcA
RemovePropW
GetDlgItem
CharLowerA
LoadCursorFromFileW
SetCursor
GetDCEx
MB_GetString
ReleaseCapture
GetThreadDesktop
BroadcastSystemMessageA
wsprintfW
UserRealizePalette
OemToCharW
GetSubMenu
GetMessageTime
ChangeMenuW
IsDialogMessage
DrawTextExA
TabbedTextOutW
LoadImageA
CreateWindowExA
SetRect
ScrollWindowEx
SetConsoleReserveKeys
CharUpperA
ChildWindowFromPoint
InvalidateRgn
CharNextW
GetWindowTextLengthA
GetSystemMenu
CopyIcon
gdi32
CreateHatchBrush
GdiIsMetaPrintDC
SetRelAbs
AddFontResourceW
CreateSolidBrush
StretchDIBits
GetStockObject
RemoveFontResourceTracking
GetTextExtentPoint32W
GetCharWidthFloatA
SelectBrushLocal
SetBoundsRect
GdiGetCodePage
SetPixelV
GetKerningPairs
GetTextCharset
GetEnhMetaFileDescriptionW
GdiQueryFonts
GdiGetBatchLimit
GdiProcessSetup
SelectPalette
Escape
EndDoc
GdiConvertDC
Polyline
CreateEnhMetaFileA
TextOutW
AngleArc
DeleteObject
CreateDIBPatternBrush
SetDIBitsToDevice
GdiValidateHandle
GetMapMode
GetSystemPaletteEntries
AbortDoc
GetViewportOrgEx
SetDeviceGammaRamp
CreatePolyPolygonRgn
ole32
STGMEDIUM_UserUnmarshal
MkParseDisplayName
CoCreateInstanceEx
CoGetTreatAsClass
CoFreeLibrary
RegisterDragDrop
CoUninitialize
StringFromIID
OleRegGetMiscStatus
StgSetTimes
UtConvertDvtd32toDvtd16
CoFreeUnusedLibraries
ReadClassStg
CoGetPSClsid
SNB_UserSize
CoSetProxyBlanket
OleGetAutoConvert
IIDFromString
HBRUSH_UserFree
GetConvertStg
CoCopyProxy
CLIPFORMAT_UserMarshal
OleCreateLinkToFileEx
CoRegisterPSClsid
Sections
.idata Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 71KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ