FWroeeWqoinnmw
Static task
static1
Behavioral task
behavioral1
Sample
639c1e0ebd239824b033591f8809a3c8e4e92bc42fb456514b10b8ee7089c5e6.dll
Resource
win7-20240903-en
General
-
Target
639c1e0ebd239824b033591f8809a3c8e4e92bc42fb456514b10b8ee7089c5e6
-
Size
184KB
-
MD5
e2fe0ab19333c1e40a495c63d404c691
-
SHA1
ed4c4973a9d83d9b60b3f521baa3699581f780f4
-
SHA256
639c1e0ebd239824b033591f8809a3c8e4e92bc42fb456514b10b8ee7089c5e6
-
SHA512
a06e9fcf7f519c62e7a87b573beddd5fff8d7221bd36d669d02b3fd9beb24b4b8ae4d50b8f0fe1dec8cf0db392d6885f53675d00e2c5dbcd3cc59fdcfef1aa99
-
SSDEEP
3072:xgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgGdA4l:IPFkq6zOe5ilSanOpd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 639c1e0ebd239824b033591f8809a3c8e4e92bc42fb456514b10b8ee7089c5e6
Files
-
639c1e0ebd239824b033591f8809a3c8e4e92bc42fb456514b10b8ee7089c5e6.dll windows:5 windows x86 arch:x86
4a4882bc1b5b7458d9aba22e8f9b9b31
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegOverridePredefKey
RegisterEventSourceW
gdi32
GetFontData
msvcrt
memset
user32
ShowOwnedPopups
oleaut32
VarBstrFromDec
kernel32
GetModuleHandleW
LoadLibraryExA
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ