Static task
static1
Behavioral task
behavioral1
Sample
741d501850af372cfe06763aeb76b429529556e4d93e77723e202d574f53d3e1N.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
741d501850af372cfe06763aeb76b429529556e4d93e77723e202d574f53d3e1N.dll
Resource
win10v2004-20241007-en
General
-
Target
741d501850af372cfe06763aeb76b429529556e4d93e77723e202d574f53d3e1N
-
Size
21KB
-
MD5
2ac348d81b163cedecd6407ffbaae320
-
SHA1
5dd405c9a0a7ce89b2fde2c6130546c62bd56d01
-
SHA256
741d501850af372cfe06763aeb76b429529556e4d93e77723e202d574f53d3e1
-
SHA512
915f2b88a5a49c2f0ed984cb3d1da362dad0c7f1f5be54dfed96af9d8d7897cb25c4ce635c7c23d5031e4b0709c713abb3b1adfbd97a94f32ace92e800d27109
-
SSDEEP
384:5G7PrqHIsFIcWR1+jX8c665eGpIGN/eYsdti49JoNQSLl:5G7rU9ShGjXT6TG2GNWYs7iTiSL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 741d501850af372cfe06763aeb76b429529556e4d93e77723e202d574f53d3e1N
Files
-
741d501850af372cfe06763aeb76b429529556e4d93e77723e202d574f53d3e1N.dll windows:5 windows x86 arch:x86
aefccd277a4b8698c60aa50fdfac9fc1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetCursorPos
gdi32
ExtTextOutA
d3d9
Direct3DCreate9
msvcr100
memcpy
Sections
.text Size: 16KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE