Static task
static1
Behavioral task
behavioral1
Sample
024341afc3468bd32f685cece18af2320905e94bb35542d05151dd00b54bcc27.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
024341afc3468bd32f685cece18af2320905e94bb35542d05151dd00b54bcc27.dll
Resource
win10v2004-20230221-en
General
-
Target
024341afc3468bd32f685cece18af2320905e94bb35542d05151dd00b54bcc27
-
Size
60KB
-
MD5
3ba30cbbc24f731754d96ef83fcad1d5
-
SHA1
1f5e5e721efd7baaa5f9490bc7e6e2ad2bd6bd4a
-
SHA256
024341afc3468bd32f685cece18af2320905e94bb35542d05151dd00b54bcc27
-
SHA512
ef9ab710033b3360f9b49162632cb5c51c85b41a9f6c6133fbcae28d392200b12287e81e72539e426dac515d465f0482e81598600ddd7baa95fc009c9341ef8d
-
SSDEEP
1536:2AWoVW7kOOOQDDgePOzkKJMcboviUw8Z+:2AWoYkOOOQDMePCMcbolJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 024341afc3468bd32f685cece18af2320905e94bb35542d05151dd00b54bcc27
Files
-
024341afc3468bd32f685cece18af2320905e94bb35542d05151dd00b54bcc27.dll windows x86
63cbf8bd20c1290cfab1ed83b71ea939
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
CloseHandle
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
TerminateThread
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetProcAddress
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE