Static task
static1
Behavioral task
behavioral1
Sample
3bdbf08fe17b9e1968b729f69e2e7e535e773ccd43c2530fbdbfe31808bd798e.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3bdbf08fe17b9e1968b729f69e2e7e535e773ccd43c2530fbdbfe31808bd798e.dll
Resource
win10v2004-20230703-en
General
-
Target
3bdbf08fe17b9e1968b729f69e2e7e535e773ccd43c2530fbdbfe31808bd798e
-
Size
1.3MB
-
MD5
496e248ea7459d7358a62415c38639fb
-
SHA1
8386376848ee9d5752c6d7b844f5240d3f985c6f
-
SHA256
3bdbf08fe17b9e1968b729f69e2e7e535e773ccd43c2530fbdbfe31808bd798e
-
SHA512
0a49662a8539faad886dc0bd7b4fffb79bc195a967f8a5d8e1e7ecaa33eaea86501545c5e7568b60fbc8ec11b3511cd7e4952aa6ce777fac0fb153caad9bd7d2
-
SSDEEP
24576:GmSjZ4h7POKX1UshOrD5CWQ70BN8uum94+BHL3PL:5Sqh7mdsI3ozug+ZDPL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bdbf08fe17b9e1968b729f69e2e7e535e773ccd43c2530fbdbfe31808bd798e
Files
-
3bdbf08fe17b9e1968b729f69e2e7e535e773ccd43c2530fbdbfe31808bd798e.dll windows x86
781909fc45c25257e6898adbc5061c0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
FreeLibrary
WideCharToMultiByte
GetCurrentProcessId
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
SetUnhandledExceptionFilter
RaiseException
CloseHandle
WriteConsoleW
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
SetStdHandle
DecodePointer
IsDebuggerPresent
OutputDebugStringW
GetStringTypeW
EncodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
QueryPerformanceCounter
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
InitializeSListHead
LoadLibraryExW
CreateFileW
GetCurrentThread
GetThreadTimes
InterlockedFlushSList
RtlUnwind
GetModuleHandleExW
GetFileType
SetFilePointerEx
WriteFile
GetConsoleCP
GetConsoleMode
ExitProcess
GetModuleFileNameA
GetACP
GetStdHandle
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ