Motd
Static task
static1
Behavioral task
behavioral1
Sample
7bead29093a5ff9e111cf272fc1949f4d2e1bd1e1f7dbbb0e4b9806c2403a8ad.dll
Resource
win7-20230220-en
General
-
Target
7bead29093a5ff9e111cf272fc1949f4d2e1bd1e1f7dbbb0e4b9806c2403a8ad
-
Size
272KB
-
MD5
48f2440c51639a3457a8197451512de5
-
SHA1
5356e636c72808c7807af8b9e4028f083df8f37e
-
SHA256
f4204f957a58c8ffc50e751243685ef44e6016bc02dd42b5eefe708ab9f732cc
-
SHA512
b54f8679a3f3460db0e71cd535bcab240a8f96aac215c7696fe0f0d5724eb71ad1976d282eb8cfde2d8529db2a132cdb06e4f850eaad2790093836b30b508c48
-
SSDEEP
6144:sF7p3jOTFgKkZg6eHwCjSrGcxqE9MsZl9zYkigcltc2p:YtiTUgtOrG8nj1iggck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/7bead29093a5ff9e111cf272fc1949f4d2e1bd1e1f7dbbb0e4b9806c2403a8ad
Files
-
7bead29093a5ff9e111cf272fc1949f4d2e1bd1e1f7dbbb0e4b9806c2403a8ad.zip
-
7bead29093a5ff9e111cf272fc1949f4d2e1bd1e1f7dbbb0e4b9806c2403a8ad.dll windows x86
abbf45d53faf8e5020b1ed87d549651b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateFileA
CloseHandle
GetLastError
HeapWalk
DeleteCriticalSection
CreateThread
SuspendThread
FindFirstFileA
FindNextFileA
GetFileType
VirtualAlloc
CreateMutexA
ReleaseMutex
SetHandleInformation
GetLocalTime
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
FindClose
FindFirstFileExA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
Exports
Exports
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 233KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 191KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ