Static task
static1
Behavioral task
behavioral1
Sample
e4e0d2ef7f0412f24faa0c46bc3cbc4b189869a7c667f640b4d302c2f4f7b747.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e4e0d2ef7f0412f24faa0c46bc3cbc4b189869a7c667f640b4d302c2f4f7b747.dll
Resource
win10v2004-20230703-en
General
-
Target
e4e0d2ef7f0412f24faa0c46bc3cbc4b189869a7c667f640b4d302c2f4f7b747
-
Size
1.4MB
-
MD5
21c6a57421f6b4fb6997eab6c0175c44
-
SHA1
d09f24d869d2f980f5e6b20b0be7539d076c881e
-
SHA256
e4e0d2ef7f0412f24faa0c46bc3cbc4b189869a7c667f640b4d302c2f4f7b747
-
SHA512
d5de91e5dd072a34cea235584c3f8e0a9c9d4b83ec70bb42d1d0bbd15b6fa4369772c321b7bc0ac1c86ddf9c9370e77f5d06b18f22677814592f78259b140c88
-
SSDEEP
24576:FGSjZ4h7POKX1UshOrD5CWQ70BN8uum94+BHL3Ph:kSqh7mdsI3ozug+ZDPh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4e0d2ef7f0412f24faa0c46bc3cbc4b189869a7c667f640b4d302c2f4f7b747
Files
-
e4e0d2ef7f0412f24faa0c46bc3cbc4b189869a7c667f640b4d302c2f4f7b747.dll windows x86
6bfbb9566f6032dd87d5f8378253621f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
FreeLibrary
WideCharToMultiByte
GetCurrentProcessId
CreateThread
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
SetUnhandledExceptionFilter
RaiseException
CloseHandle
WriteConsoleW
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
SetStdHandle
GetStdHandle
GetACP
DecodePointer
IsDebuggerPresent
OutputDebugStringW
GetStringTypeW
EncodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
QueryPerformanceCounter
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
InitializeSListHead
LoadLibraryExW
CreateFileW
GetCurrentThread
GetThreadTimes
InterlockedFlushSList
RtlUnwind
GetModuleHandleExW
GetFileType
SetFilePointerEx
WriteFile
GetConsoleCP
GetConsoleMode
ExitProcess
GetModuleFileNameA
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ