Hello
Static task
static1
Behavioral task
behavioral1
Sample
fc5836270632d0e3761d49cb5f54e1ec0c2729abeb4f97737289b98e0a4ffb83.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc5836270632d0e3761d49cb5f54e1ec0c2729abeb4f97737289b98e0a4ffb83.dll
Resource
win10v2004-20240802-en
General
-
Target
fc5836270632d0e3761d49cb5f54e1ec0c2729abeb4f97737289b98e0a4ffb83
-
Size
1.9MB
-
MD5
c9f44a077f64e12c840cd91a7eb7e410
-
SHA1
159c8ac647fb8f2559049c218f49b6789c39552c
-
SHA256
fc5836270632d0e3761d49cb5f54e1ec0c2729abeb4f97737289b98e0a4ffb83
-
SHA512
fef380bd30370b3f01a034593b43649e49744fc6f9dd3975fce4b51cb3a2dd5879129a861adbd98c35d959204eccdbfafff9759da8fd6732d567bd7b5bbad1d3
-
SSDEEP
24576:/NC31maEOEbLHVgo2Vt1jMawJvw4Cbvk8YLJgMuS0KNfeJs1kE5f6irBVR70J0z5:/ajIHSoiLrSwIzOMuSjfcs1kE59ONQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc5836270632d0e3761d49cb5f54e1ec0c2729abeb4f97737289b98e0a4ffb83
Files
-
fc5836270632d0e3761d49cb5f54e1ec0c2729abeb4f97737289b98e0a4ffb83.dll windows:4 windows x86 arch:x86
b4285f184db06c7a25724f8fa3c967f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
rasapi32
RasGetConnectStatusA
kernel32
GlobalLock
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CreateIconFromResource
gdi32
DPtoLP
winmm
midiOutUnprepareHeader
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleUninitialize
oleaut32
SafeArrayDestroy
comctl32
ord17
ws2_32
gethostname
wininet
InternetOpenA
comdlg32
GetOpenFileNameA
Exports
Exports
Sections
.text Size: - Virtual size: 840KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: - Virtual size: 814KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp2 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ