Static task
static1
Behavioral task
behavioral1
Sample
fad807aeda3a9c20a9721d3f7fe5ededff4ae468d826f01640d4f720a22fe79a.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fad807aeda3a9c20a9721d3f7fe5ededff4ae468d826f01640d4f720a22fe79a.dll
Resource
win10v2004-20230703-en
General
-
Target
fad807aeda3a9c20a9721d3f7fe5ededff4ae468d826f01640d4f720a22fe79a
-
Size
1.4MB
-
MD5
237e04dd4d6baf7d42e32224240f2377
-
SHA1
a31a14e6446705f993e9d51f0ff8a64e3bd44824
-
SHA256
fad807aeda3a9c20a9721d3f7fe5ededff4ae468d826f01640d4f720a22fe79a
-
SHA512
749840cc83e72baa52e6b188013508b6a70fe946036247cd24eb59a9e801b4475653b9450d3ca7e28b692a7d282f93cb252b43bdc4ffce35178dc29ba49c8137
-
SSDEEP
24576:JI5SjZ4h7POKX1UshOrD5CWQ70BN8uum94+BHL3P7:25Sqh7mdsI3ozug+ZDP7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fad807aeda3a9c20a9721d3f7fe5ededff4ae468d826f01640d4f720a22fe79a
Files
-
fad807aeda3a9c20a9721d3f7fe5ededff4ae468d826f01640d4f720a22fe79a.dll windows x86
1c9648d0388e05d67715d5507860e4f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WriteFile
OutputDebugStringW
GetCurrentProcess
GetCurrentThread
GetStartupInfoW
WideCharToMultiByte
FreeLibrary
CreateEventW
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetStdHandle
LoadResource
GetProcAddress
GetModuleHandleW
FindResourceExW
GetCurrentThreadId
GetCurrentProcessId
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetStdHandle
GetACP
GetModuleFileNameA
ExitProcess
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
GetModuleHandleExW
RtlUnwind
InterlockedFlushSList
GetThreadTimes
HeapDestroy
GetLastError
SetUnhandledExceptionFilter
RaiseException
CloseHandle
DecodePointer
FlushFileBuffers
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
CreateFileW
GetStringTypeW
EncodePointer
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
LCMapStringW
GetCPInfo
FindClose
FindNextFileA
IsProcessorFeaturePresent
UnhandledExceptionFilter
TerminateProcess
InitializeSListHead
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ