Static task
static1
Behavioral task
behavioral1
Sample
3dd984a38b468bb856dd6d27392aa2a9f6592b834b2cbcb6f74d54b9f8c69c87N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3dd984a38b468bb856dd6d27392aa2a9f6592b834b2cbcb6f74d54b9f8c69c87N.dll
Resource
win10v2004-20240910-en
General
-
Target
3dd984a38b468bb856dd6d27392aa2a9f6592b834b2cbcb6f74d54b9f8c69c87N
-
Size
2.3MB
-
MD5
becd0a4db9e0da7213c3d80664d547b0
-
SHA1
8f926a7237d2da83d0035a2f364e6c5516d37920
-
SHA256
3dd984a38b468bb856dd6d27392aa2a9f6592b834b2cbcb6f74d54b9f8c69c87
-
SHA512
cab09b3b1c5309919662d78d7c9f2dd3fdfb963785ba883330b8098a67ab862d0639beb8130c50367161b1328016f4ffbe4d5f20e5127a8afdfda8b1e4a65df8
-
SSDEEP
49152:5OtgbhKgPmE1bMs+7tyMrTxZ/M/jegIC4zLNC:otglPNAH7tZTr/M7egP4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dd984a38b468bb856dd6d27392aa2a9f6592b834b2cbcb6f74d54b9f8c69c87N
Files
-
3dd984a38b468bb856dd6d27392aa2a9f6592b834b2cbcb6f74d54b9f8c69c87N.dll windows:5 windows x86 arch:x86
d1156a75aa36c7c36027435c4139db8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetStdHandle
GetBinaryTypeA
GetModuleFileNameA
Sleep
GetCPInfo
OutputDebugStringA
GetModuleHandleW
user32
GetCursor
IsCharLowerW
GetCapture
PeekMessageW
GetSystemMenu
GetIconInfo
gdi32
Ellipse
GetRegionData
CreateBrushIndirect
GetViewportExtEx
BeginPath
SetBitmapDimensionEx
ole32
CoFreeUnusedLibraries
OleGetIconOfClass
CoReleaseServerProcess
wintrust
WTHelperProvDataFromStateData
oleaut32
SysAllocStringLen
Sections
.text Size: 596KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FONST Size: 500KB - Virtual size: 499KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2er- Size: 1024KB - Virtual size: 1023KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
*FA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ