Static task
static1
Behavioral task
behavioral1
Sample
1627d11df8c16e568e5eef2c579607a1b991a54da08d48efbd18429e78e4266d.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1627d11df8c16e568e5eef2c579607a1b991a54da08d48efbd18429e78e4266d.dll
Resource
win10v2004-20230703-en
General
-
Target
1627d11df8c16e568e5eef2c579607a1b991a54da08d48efbd18429e78e4266d
-
Size
476KB
-
MD5
b95bc73ad7c6393336c1b5f3bb24af59
-
SHA1
e565c72096bb7acb632772a2f2548e33b7880a22
-
SHA256
1627d11df8c16e568e5eef2c579607a1b991a54da08d48efbd18429e78e4266d
-
SHA512
036f4c56ea37456193d97296fffd32f95c93dc2916bff6a362983c141517f5d83bec0de3e04716751644f5cccc6f0e4ac86063a522e45b450610e83c7e709af3
-
SSDEEP
12288:2OrDQJ8/HSweHS5uXEhV8q4kMZebDVTu3l3A:+8/bXhVIdau3l3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1627d11df8c16e568e5eef2c579607a1b991a54da08d48efbd18429e78e4266d
Files
-
1627d11df8c16e568e5eef2c579607a1b991a54da08d48efbd18429e78e4266d.dll windows x86
90fb0d3b9147b78e7ee69fa48ce244a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapAlloc
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 380KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ