Static task
static1
Behavioral task
behavioral1
Sample
280a2fd57c677272d77de8c3dfee6f7a52b890878cf9b26b638a5556b4a5149c.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
280a2fd57c677272d77de8c3dfee6f7a52b890878cf9b26b638a5556b4a5149c.dll
Resource
win10v2004-20230621-en
General
-
Target
280a2fd57c677272d77de8c3dfee6f7a52b890878cf9b26b638a5556b4a5149c
-
Size
100KB
-
MD5
e18d9ee40c4017dd2b14f7da38270cba
-
SHA1
817a9feb72718b831e206248989e8139bed53bef
-
SHA256
280a2fd57c677272d77de8c3dfee6f7a52b890878cf9b26b638a5556b4a5149c
-
SHA512
cf81d33e061ab9669977e4d7b06fd55e0ea2b8bbb0d18dbaf6941e931dac210af2b095cdde72d05a20d2673dbde958a595f92f2a477ecb371fe2ad32650ebbd7
-
SSDEEP
1536:mCeAecRStD3LzenRpOvlE7mHxsz5Y57mklo7K3:J72D3LzqEvHyzC57mklo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 280a2fd57c677272d77de8c3dfee6f7a52b890878cf9b26b638a5556b4a5149c
Files
-
280a2fd57c677272d77de8c3dfee6f7a52b890878cf9b26b638a5556b4a5149c.dll windows x86
55cff23a855eb2779a26abc113ecb4b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
HeapReAlloc
HeapAlloc
ReadFile
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFileEx
lstrcpyA
MapViewOfFile
UnmapViewOfFile
CloseHandle
HeapSize
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
GetProcAddress
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
user32
GetDC
ReleaseDC
MessageBoxA
GetDesktopWindow
gdi32
BitBlt
GdiFlush
CreatePalette
CreateDIBitmap
GetDIBits
GetObjectA
CreateCompatibleDC
SelectObject
DeleteDC
GetNearestPaletteIndex
DeleteObject
CreateDIBSection
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE