Static task
static1
Behavioral task
behavioral1
Sample
dc1b7bd2224357bf904b08e7d38fa823eca85922c249c7efadaf17832fc05484N.dll
Resource
win7-20240903-en
General
-
Target
dc1b7bd2224357bf904b08e7d38fa823eca85922c249c7efadaf17832fc05484N
-
Size
6.5MB
-
MD5
768f598f44421c1bf4bc4dfb5eeb80a0
-
SHA1
d972f5ff261300a2663882f6a66d6067804deacc
-
SHA256
dc1b7bd2224357bf904b08e7d38fa823eca85922c249c7efadaf17832fc05484
-
SHA512
d43a5ccf256d0ed90ee6ed50b7b53cfce3757818c115a0166d37390cce24ca9ce9ceca684dd6e7ac4e32e87ec194c17fe7fce080f7979811a28975d5aaac7a2a
-
SSDEEP
196608:P5VwgV6AN0F2UNUfTU7ffJ/053unrRPiLtJ9wg6LP:PZ6j2UybinWdunrVi5Jq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc1b7bd2224357bf904b08e7d38fa823eca85922c249c7efadaf17832fc05484N
Files
-
dc1b7bd2224357bf904b08e7d38fa823eca85922c249c7efadaf17832fc05484N.dll windows:6 windows x86 arch:x86
c63e24271770d2bf8d95418a9859577f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetConsoleCP
FlushFileBuffers
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
LoadLibraryExW
GetModuleFileNameW
WriteFile
GetFileType
GetOEMCP
GetACP
GetConsoleMode
IsDebuggerPresent
GetProcessHeap
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
IsProcessorFeaturePresent
GetModuleHandleW
ReadFile
SetFilePointerEx
OutputDebugStringW
SetStdHandle
WriteConsoleW
ReadConsoleW
CreateFileW
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
SetConsoleTextAttribute
Sleep
GetStdHandle
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
WinExec
lstrcpyW
GetCPInfoExW
GetUserDefaultUILanguage
ExitThread
GetPrivateProfileStringW
GetTempFileNameW
GetSystemDefaultUILanguage
GetFullPathNameW
GetPrivateProfileIntW
IsValidCodePage
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapReAlloc
GetSystemTimeAsFileTime
HeapFree
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleExW
GetProcAddress
GetCommandLineA
GetCurrentThreadId
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
SetConsoleMode
user32
DestroyWindow
SetCursor
GetDlgItemInt
MapDialogRect
PostQuitMessage
RegisterWindowMessageW
GetKeyState
GetParent
LoadIconA
CharLowerBuffW
DrawTextExW
ModifyMenuW
BeginPaint
SetDlgItemInt
GetWindowPlacement
GetWindowTextA
GetWindowTextW
ReleaseDC
GetDlgItem
EnumChildWindows
RemoveMenu
GetSystemMetrics
SetScrollInfo
ValidateRect
CheckMenuItem
GetMessageTime
ShowOwnedPopups
MsgWaitForMultipleObjects
CreateMenu
SetFocus
GetWindowTextLengthA
GetDC
GetQueueStatus
GetCapture
EnableMenuItem
SetClassLongA
DefWindowProcA
GetDesktopWindow
IsDlgButtonChecked
FlashWindow
SetDlgItemTextW
DialogBoxParamA
SetWindowTextW
TranslateMDISysAccel
RedrawWindow
gdi32
GetCharacterPlacementW
DeleteDC
GetDeviceCaps
GdiFlush
SetPixel
SelectClipRgn
CreateCompatibleDC
Rectangle
RealizePalette
SetPaletteEntries
GetTextExtentPointA
GetPixel
EndDoc
GetStockObject
ExtTextOutA
MaskBlt
CreateBitmap
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateDIBitmap
LineTo
comdlg32
GetOpenFileNameW
advapi32
RegGetKeySecurity
AllocateAndInitializeSid
StartServiceW
OpenSCManagerW
RegUnLoadKeyW
RegLoadKeyW
oleaut32
SafeArrayCreate
VariantCopy
SysReAllocStringLen
VariantClear
Sections
.text Size: 550KB - Virtual size: 550KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ