?QQStart@@YGXK@Z
Static task
static1
Behavioral task
behavioral1
Sample
5523d8e5e2eda55a3828b6b93237e21b2c56598a617232f3584141d62c1aaa0dN.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
5523d8e5e2eda55a3828b6b93237e21b2c56598a617232f3584141d62c1aaa0dN.dll
Resource
win10v2004-20240802-en
General
-
Target
5523d8e5e2eda55a3828b6b93237e21b2c56598a617232f3584141d62c1aaa0dN
-
Size
66KB
-
MD5
ff784b05149f00bf6afe129ac9cad770
-
SHA1
f189311bbd62d4adcc3ac983461c8b9840824ff2
-
SHA256
5523d8e5e2eda55a3828b6b93237e21b2c56598a617232f3584141d62c1aaa0d
-
SHA512
aaa1bd69970bde55fb594edeb8f627bc4604293778e1304d3bc2a01e94a4140337c6d55e8ddf64a87c79fce3ad42d64ad0defd02f95f4af4cca6d88ae3170e52
-
SSDEEP
1536:8Cn2dQoiQhPeCZHmjw02Y8rkaVINMwmpSqn:viGr2lrnINM5tn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5523d8e5e2eda55a3828b6b93237e21b2c56598a617232f3584141d62c1aaa0dN
Files
-
5523d8e5e2eda55a3828b6b93237e21b2c56598a617232f3584141d62c1aaa0dN.dll windows:4 windows x86 arch:x86
b545fb6a0a2b484d91d2b66e18d4a110
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
winmm
sndPlaySoundA
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
kernel32
lstrcpynA
GetModuleHandleA
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
OpenProcess
CreateThread
CreateMutexA
GetLastError
GetModuleFileNameA
GetProcAddress
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
GetPrivateProfileStringA
GetTickCount
GetVersionExA
WriteFile
CreateFileA
SetFilePointer
GetLocalTime
ReadFile
GetPrivateProfileIntA
LocalFree
FindResourceA
LoadResource
SizeofResource
GlobalLock
GlobalUnlock
MultiByteToWideChar
Sleep
DeleteFileA
ExitProcess
GlobalAlloc
GlobalFree
CreateDirectoryA
LocalAlloc
DisableThreadLibraryCalls
user32
LoadIconA
GetWindowTextA
FindWindowExA
FindWindowA
GetWindowThreadProcessId
SendMessageA
CharLowerA
SetWindowLongA
GetWindowLongA
CreateDialogParamA
IsWindow
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
RegisterClassExA
UpdateWindow
CreateWindowExA
PostQuitMessage
DestroyIcon
SetWindowPos
SetWindowRgn
GetCursorPos
GetDC
GetClassLongA
FillRect
ReleaseDC
MoveWindow
SetTimer
DefWindowProcA
ShowWindow
PtInRect
LoadCursorA
SetCursor
KillTimer
GetWindowDC
wsprintfA
GetWindowRect
GetSystemMetrics
gdi32
SelectObject
BitBlt
GetObjectA
CreateCompatibleDC
CreatePolygonRgn
TextOutA
SetTextColor
CreateFontA
SetPixel
SetBkMode
GetTextExtentPoint32A
GetStockObject
LineTo
MoveToEx
CreatePen
Rectangle
CreateSolidBrush
CreateCompatibleBitmap
StretchBlt
DeleteObject
advapi32
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCloseKey
shell32
ShellExecuteA
Shell_NotifyIconA
ole32
CreateStreamOnHGlobal
gdiplus
GdiplusShutdown
GdipLoadImageFromStream
GdipCreateBitmapFromFile
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdipDisposeImage
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ