Static task
static1
Behavioral task
behavioral1
Sample
aa842e4a7241d92e99d0e49961989e1e91ba2ff9df4c23c1b5a38ee07fce127c.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa842e4a7241d92e99d0e49961989e1e91ba2ff9df4c23c1b5a38ee07fce127c.dll
Resource
win10v2004-20241007-en
General
-
Target
aa842e4a7241d92e99d0e49961989e1e91ba2ff9df4c23c1b5a38ee07fce127c
-
Size
94KB
-
MD5
6e91cbfd008bad2e8f41019f14219ff4
-
SHA1
9f72cb5ce5909efe679ff226fd1af85afa47a06d
-
SHA256
aa842e4a7241d92e99d0e49961989e1e91ba2ff9df4c23c1b5a38ee07fce127c
-
SHA512
c683b9ae6342d44c0d20e951d6ac2326f9a672809bb8e105ff3151ec6ceee0d88f8801a63c03ec00c2616f585a66675ceed887d9b1d2438977a3c9cae58050ad
-
SSDEEP
384:IiLepqx6ltrIx57IVnSL7xqHRSSN6HpNZsNGPqX3/5nO+5GoiZUybSnJb0LuC8UT:Iiipv/rC50Vnb2NinLcdbKyLu/kvF7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa842e4a7241d92e99d0e49961989e1e91ba2ff9df4c23c1b5a38ee07fce127c
Files
-
aa842e4a7241d92e99d0e49961989e1e91ba2ff9df4c23c1b5a38ee07fce127c.dll windows:4 windows x86 arch:x86
325d065809872f9ce2301ecae29384f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB Paths
Imports
advapi32
RegCloseKey
RegConnectRegistryW
RegCreateKeyW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW
kernel32
DisableThreadLibraryCalls
GetDefaultCommConfigW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
MultiByteToWideChar
SetDefaultCommConfigW
lstrcmpA
lstrcmpiW
ntdll
_vsnprintf
ucrtbase
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcspn
strlen
user32
DialogBoxParamW
EndDialog
GetDlgItem
GetWindowLongW
GetWindowTextA
GetWindowTextW
MessageBoxA
SendMessageA
SetWindowLongW
SetWindowTextW
Exports
Exports
EnumPropPages
drvCommConfigDialogA
drvCommConfigDialogW
drvGetDefaultCommConfigA
drvGetDefaultCommConfigW
drvSetDefaultCommConfigA
drvSetDefaultCommConfigW
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 4KB - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 4KB - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 192B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 345B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ