Static task
static1
Behavioral task
behavioral1
Sample
dc30965dc92fe96a05e129f01baa709cdfa34669ab5de0956648eff334547880.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
dc30965dc92fe96a05e129f01baa709cdfa34669ab5de0956648eff334547880.dll
Resource
win10v2004-20230703-en
General
-
Target
dc30965dc92fe96a05e129f01baa709cdfa34669ab5de0956648eff334547880
-
Size
1.4MB
-
MD5
3f698b322a77a520a5de4151178e45d4
-
SHA1
0aabce5b9508f31f0e46997b93dd365807c37d6b
-
SHA256
dc30965dc92fe96a05e129f01baa709cdfa34669ab5de0956648eff334547880
-
SHA512
6131f6bb4febd6ca2394b55cebb72c5bf652c19a1f552f78ae6cb1d19fe0c37142e106b5668c5d16850f60cf7a970123bbceb6f0adb73b89ef14744fd307f20b
-
SSDEEP
24576:wNG5SjZ4h7POKX1UshOrD5CWQ70BN8uum94+BHL3PMm:z5Sqh7mdsI3ozug+ZDPMm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc30965dc92fe96a05e129f01baa709cdfa34669ab5de0956648eff334547880
Files
-
dc30965dc92fe96a05e129f01baa709cdfa34669ab5de0956648eff334547880.dll windows x86
d5930551651d65d687d7401d08c0038e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WriteFile
OutputDebugStringW
GetCurrentProcess
GetCurrentThread
GetStartupInfoW
WideCharToMultiByte
FreeLibrary
CreateEventW
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
MultiByteToWideChar
FindResourceW
SizeofResource
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetStdHandle
LockResource
LoadResource
GetProcAddress
GetModuleHandleW
FindResourceExW
GetCurrentThreadId
GetCurrentProcessId
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetStdHandle
GetACP
GetModuleFileNameA
ExitProcess
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
GetModuleHandleExW
RtlUnwind
InterlockedFlushSList
GetThreadTimes
FlushFileBuffers
HeapDestroy
GetLastError
SetUnhandledExceptionFilter
RaiseException
CloseHandle
DecodePointer
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
CreateFileW
GetStringTypeW
EncodePointer
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
LCMapStringW
GetCPInfo
FindClose
FindNextFileA
IsProcessorFeaturePresent
UnhandledExceptionFilter
TerminateProcess
InitializeSListHead
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ