OpenChat
Static task
static1
Behavioral task
behavioral1
Sample
e8d9f5cca526b48d0ab0c4f17f51f03f68f5d83128e3b22cd33fadf16de26ba5N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e8d9f5cca526b48d0ab0c4f17f51f03f68f5d83128e3b22cd33fadf16de26ba5N.dll
Resource
win10v2004-20241007-en
General
-
Target
e8d9f5cca526b48d0ab0c4f17f51f03f68f5d83128e3b22cd33fadf16de26ba5N
-
Size
41KB
-
MD5
299b2e1c9101f8947639d27c60f95380
-
SHA1
4d20253d43ddd7dd6b11fd56157f6e3431a1b37f
-
SHA256
e8d9f5cca526b48d0ab0c4f17f51f03f68f5d83128e3b22cd33fadf16de26ba5
-
SHA512
1e57b312d116d80c5b7e3d835bf74b32f6f068bfcdbeaeceb6892a67a660b8684b0e3aaf28db28d1bfe4ab8c22fe5fa4523ca78d75b8dc9d705e68250783489b
-
SSDEEP
768:VMqq/0PUvXmV336F7HIl0vo6pBTrw1fuT42Jsw7To9I:V+/mN476SBTruUxfPo+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8d9f5cca526b48d0ab0c4f17f51f03f68f5d83128e3b22cd33fadf16de26ba5N
Files
-
e8d9f5cca526b48d0ab0c4f17f51f03f68f5d83128e3b22cd33fadf16de26ba5N.dll windows:5 windows x86 arch:x86
6e7765f9b3da7c58e89c8fe722ffd503
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
TlsAlloc
DisableThreadLibraryCalls
CloseHandle
GetLastError
GetDriveTypeA
MultiByteToWideChar
IsValidCodePage
lstrcmpiA
VirtualFree
GetVersion
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapReAlloc
FileTimeToLocalFileTime
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
GetProcAddress
GetSystemTimeAsFileTime
HeapAlloc
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
user32
FindWindowA
GetSystemMetrics
MessageBoxA
GetClientRect
GetDC
gdi32
Rectangle
shlwapi
StrStrIA
PathFileExistsA
advapi32
RegOpenKeyExA
RegSetValueExW
ole32
CoInitialize
CoTaskMemAlloc
Exports
Exports
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ