bbbb
Static task
static1
Behavioral task
behavioral1
Sample
bcdda1f92524668c58a7541f1c1876bc2be06a95d0a39e0ecedcf1e79c5aa510.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
bcdda1f92524668c58a7541f1c1876bc2be06a95d0a39e0ecedcf1e79c5aa510.dll
Resource
win10v2004-20230703-en
General
-
Target
bcdda1f92524668c58a7541f1c1876bc2be06a95d0a39e0ecedcf1e79c5aa510
-
Size
112KB
-
MD5
cda6f100714e4d175f808f4d2f472c3e
-
SHA1
ae7a5ef5ae484d5b55f11038c1b09e9e6d79ae81
-
SHA256
bcdda1f92524668c58a7541f1c1876bc2be06a95d0a39e0ecedcf1e79c5aa510
-
SHA512
8cb626e4403ebacc6400f330041cd8df92e6b729e9e9b7ac5d7e7a9daa66b4ee20168b14db1db47ca588124d748778e333941d0880c8091e1baa82d695641a3a
-
SSDEEP
1536:r0HAZmsX3SGwzGWVFlTjTQUHDst5MsDgwEEiw67kvepo8x7rTUp+:rzZmsXiGxWVHqt555l674epo8x7cp+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcdda1f92524668c58a7541f1c1876bc2be06a95d0a39e0ecedcf1e79c5aa510
Files
-
bcdda1f92524668c58a7541f1c1876bc2be06a95d0a39e0ecedcf1e79c5aa510.dll windows x86
8bbe7b0b996d60e1a33e78eef983129d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetThreadContext
GetProcAddress
LoadLibraryA
GetThreadContext
CreateProcessA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
HeapFree
FatalAppExitA
HeapReAlloc
HeapAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
GetACP
GetOEMCP
SetStdHandle
ReadFile
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Exports
Exports
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ