Static task
static1
Behavioral task
behavioral1
Sample
d87e43e1750052ed762039eb92c386a3a1be21164aae97c4142e4a599f04b0ed.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d87e43e1750052ed762039eb92c386a3a1be21164aae97c4142e4a599f04b0ed.dll
Resource
win10v2004-20230220-en
General
-
Target
d87e43e1750052ed762039eb92c386a3a1be21164aae97c4142e4a599f04b0ed
-
Size
188KB
-
MD5
fcacd0a750bbfd4bf24dae50b131c011
-
SHA1
b9e4687723f692302041aa428d02eaa678aa1c9b
-
SHA256
d87e43e1750052ed762039eb92c386a3a1be21164aae97c4142e4a599f04b0ed
-
SHA512
6c8e559ad0f54e82a609933b64c95720dd88efc70cddf00f850c0017bad3f44162092eabd11e4634c6eb94f6bb16cf433f55e56f4a0da6ad5297838323f7e049
-
SSDEEP
3072:zFFe5yDudvbVTPr9E+tK7vmAg0FubpTBfu8xHIs92GTOlgNHrbZLIfpqiUgNHm:C5SybISAO1TBG8xHZN+RqINH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d87e43e1750052ed762039eb92c386a3a1be21164aae97c4142e4a599f04b0ed
Files
-
d87e43e1750052ed762039eb92c386a3a1be21164aae97c4142e4a599f04b0ed.dll windows x86
ead67efeb8dea9f66965d9dbbb6f49c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
TlsSetValue
TlsFree
InitializeSListHead
QueryPerformanceCounter
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
EncodePointer
DecodePointer
LCMapStringW
GetStringTypeW
GetCPInfo
RtlUnwind
InterlockedFlushSList
LoadLibraryExW
SetFilePointerEx
TlsAlloc
IsProcessorFeaturePresent
GetModuleFileNameA
GetCurrentProcess
CreateFileW
GetCurrentThreadId
CloseHandle
GetFileType
WriteFile
GetLastError
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetProcAddress
GetStartupInfoW
GetStdHandle
GetModuleHandleW
FreeLibrary
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
FindClose
ExitProcess
GetModuleHandleExW
GetConsoleMode
GetConsoleCP
SetStdHandle
HeapFree
GetACP
HeapAlloc
HeapReAlloc
TlsGetValue
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
WriteConsoleW
FlushFileBuffers
GetCurrentProcessId
HeapSize
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ