mexFunction
Static task
static1
Behavioral task
behavioral1
Sample
easy_Benign_ffb0a021f4ed2978e868a6989734006d2d9b836ccfcf32808a60e84446fb1134.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
easy_Benign_ffb0a021f4ed2978e868a6989734006d2d9b836ccfcf32808a60e84446fb1134.dll
Resource
win10v2004-20230703-en
General
-
Target
easy_Benign_ffb0a021f4ed2978e868a6989734006d2d9b836ccfcf32808a60e84446fb1134.dll
-
Size
14KB
-
MD5
b66f0cb15da9005a3be5f624037e7ff7
-
SHA1
28e7a716659f0c0905a04a7d638d809d322b9bcb
-
SHA256
ffb0a021f4ed2978e868a6989734006d2d9b836ccfcf32808a60e84446fb1134
-
SHA512
e7584083b143b6cca1a1c9b2940a9e9b1de99de8b601d03ef58de2ed79a9978905f93ff640ae48a20cf2b8331093ee038ef49f3dc95e596d89bd15cf5c2bbc58
-
SSDEEP
192:l3VGMkX9o1L3uAUyGLCb1/Kt7fhxg6Z++E7QofBA4GeujRcdC3XZ88K:l3VGMIML3pN681/KF5Z+ecdOxK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource easy_Benign_ffb0a021f4ed2978e868a6989734006d2d9b836ccfcf32808a60e84446fb1134.dll
Files
-
easy_Benign_ffb0a021f4ed2978e868a6989734006d2d9b836ccfcf32808a60e84446fb1134.dll.dll windows x64
fa4e989b5c28d4ba2522612620001f24
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
libmx
mxGetPi
mxDestroyArray
mxGetN
mxGetM
mxGetPr
mxIsChar
mxGetString_700
mxCreateDoubleMatrix_700
libmex
mexErrMsgTxt
mexCallMATLAB
mexPrintf
msvcr90
sqrt
free
malloc
exp
log
memset
sin
_encode_pointer
_malloc_crt
_initterm
_initterm_e
_encoded_null
_decode_pointer
_amsg_exit
__C_specific_handler
__CppXcptFilter
__crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
atan
signal
cos
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
Sleep
GetCurrentProcess
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ