Static task
static1
Behavioral task
behavioral1
Sample
022a8b444c4710333e915211c56be80e257ad50728ada765cc23282050e901fd.dll
Resource
win7-20240903-en
General
-
Target
022a8b444c4710333e915211c56be80e257ad50728ada765cc23282050e901fd.exe
-
Size
534KB
-
MD5
331e97b0d271eb890b2104c7d6e8d292
-
SHA1
ac50d8706fda4ab182ae8a348449e67e5e6de6bb
-
SHA256
022a8b444c4710333e915211c56be80e257ad50728ada765cc23282050e901fd
-
SHA512
f221debc5f8dee4977b7e15c434d2ca4652c67aecbf45bdf9e0602e96a01ab26d73a41e5539045d5d4f36554bb4ace3515b6fd2cff5a189b0a75aa607ed80ed3
-
SSDEEP
3072:vxAqb35qSyYNYuFwXBBWYn0WWeP24iABEabz1fz+Bnp1WC3polyaSXO3etYkpHsd:yqb35qjY7wXrNJicLfz+hqv4BtYyxDW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 022a8b444c4710333e915211c56be80e257ad50728ada765cc23282050e901fd.exe
Files
-
022a8b444c4710333e915211c56be80e257ad50728ada765cc23282050e901fd.exe.dll windows:4 windows x86 arch:x86
247417006b79b77f72f53cd59ef4de66
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
GetCurrentThread
GetCurrentProcess
lstrlenA
ole32
CoRegisterMessageFilter
advapi32
RegSetValueW
StartTraceA
gdiplus
GdipTransformPath
comctl32
CreateToolbarEx
ImageList_GetImageInfo
FlatSB_GetScrollProp
ImageList_SetIconSize
oleacc
CreateStdAccessibleProxyA
comdlg32
dwOKSubclass
user32
CallMsgFilter
FindWindowW
msimg32
DllInitialize
AlphaBlend
shell32
SHCreateShellFolderViewEx
version
VerInstallFileA
VerQueryValueW
winmm
wid32Message
oleaut32
VarDateFromDisp
oledlg
OleUIAddVerbMenuW
OleUIConvertW
shlwapi
PathMakeSystemFolderW
winspool.drv
SpoolerDevQueryPrintW
gdi32
GetStretchBltMode
Sections
.text Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 69.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ