bankall
Static task
static1
Behavioral task
behavioral1
Sample
posinf.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
posinf.dll
Resource
win10v2004-20240802-en
General
-
Target
posinf.dll
-
Size
32KB
-
MD5
9f0ff0b08206e8b4a2347c449c159758
-
SHA1
823c02b7bb75c044bfb5d5dab445d67c785199f2
-
SHA256
c4b7bbc6cedabb478d6e1a115c6e06c7eaad43fb1089f52237364719a5077433
-
SHA512
04a25eb04a2c12e52dbe2f7f290e32be37a2ce31ec9cd46b97c0e047770ddce7583488dad6ed0b1c0f5a20775f5370ff276b6d2bf5f3b20f92552997a7366c5a
-
SSDEEP
384:FWMUtEGJ4yv+MWVMJjqHtbYUz65DZMPc2F996U3kMwcDPjHNi6O5Tv:k3JhaaJjdI651MPbF996U3kMwk5ET
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource posinf.dll
Files
-
posinf.dll.dll windows:4 windows x86 arch:x86
f9d377e587bbfa90023fa3779efcf978
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord2982
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord6215
ord2864
ord1199
ord1247
ord5714
ord5289
ord5307
ord4274
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4080
msvcrt
_snprintf
strrchr
rename
_vsnprintf
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
fprintf
strncmp
time
localtime
fopen
fgets
sprintf
atoi
fclose
_access
_stat
kernel32
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
LoadLibraryExA
SetCurrentDirectoryA
GetCurrentDirectoryA
DisableThreadLibraryCalls
GetLastError
user32
GetLastActivePopup
IsIconic
SetForegroundWindow
MessageBoxA
FindWindowA
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ