Static task
static1
Behavioral task
behavioral1
Sample
5da3058c89099f4e4e6b793f7de1afacef6e1e2d0ad0b8aa920069b1168bc5b3.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5da3058c89099f4e4e6b793f7de1afacef6e1e2d0ad0b8aa920069b1168bc5b3.dll
Resource
win10v2004-20230703-en
General
-
Target
5da3058c89099f4e4e6b793f7de1afacef6e1e2d0ad0b8aa920069b1168bc5b3
-
Size
345KB
-
MD5
f5238ebba28c0d6020aec8f520b7deaa
-
SHA1
429b8744302380be43bf80341f62867b74eb7062
-
SHA256
5da3058c89099f4e4e6b793f7de1afacef6e1e2d0ad0b8aa920069b1168bc5b3
-
SHA512
bc74d737f0b12d550882caa86a070e9f0ae908ed1ce7c0f89e6aef2e1c8860b7b39e24ba4dcd7d431cdc7c809356e56ab4532a777ce4ebb99cf8cc58c3bff7dc
-
SSDEEP
6144:NIDF1P0/hlvMZuqNuwuXONNBt+P+MEpgo8tYMgj3UpnA2JHicJMZQqAt:axN/hRMEgIeHzq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5da3058c89099f4e4e6b793f7de1afacef6e1e2d0ad0b8aa920069b1168bc5b3
Files
-
5da3058c89099f4e4e6b793f7de1afacef6e1e2d0ad0b8aa920069b1168bc5b3.dll windows x86
e19dbf845a55422fe36bd7ef4f5938eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
FreeLibrary
QueryPerformanceCounter
VirtualFree
VirtualAlloc
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
GetLastError
HeapReAlloc
HeapAlloc
HeapDestroy
GetThreadContext
GetCurrentProcessId
CloseHandle
K32GetModuleInformation
SetThreadContext
OpenThread
Sleep
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
MultiByteToWideChar
GetCurrentProcess
GetProcAddress
FlushInstructionCache
CreateThread
GetModuleHandleA
GetModuleHandleW
FreeLibraryAndExitThread
user32
GetKeyState
OpenClipboard
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetForegroundWindow
SetCapture
CloseClipboard
GetCursorPos
EmptyClipboard
GetClipboardData
SetClipboardData
SetWindowLongA
CallWindowProcA
SetWindowLongW
SetCursorPos
GetAsyncKeyState
SetCursor
GetClientRect
ReleaseCapture
msvcp140
??Bid@locale@std@@QAEIXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xinvalid_argument@std@@YAXPBD@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
imm32
ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
vcruntime140
memmove
memcpy
memchr
__std_type_info_destroy_list
memset
_CxxThrowException
__current_exception_context
__current_exception
__std_type_info_compare
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
_except_handler4_common
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
api-ms-win-crt-runtime-l1-1-0
terminate
_initterm
_initterm_e
_crt_atexit
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_cexit
_errno
_wassert
_seh_filter_dll
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-math-l1-1-0
_libm_sse2_acos_precise
_libm_sse2_cos_precise
_libm_sse2_sqrt_precise
ceil
_libm_sse2_sin_precise
_libm_sse2_atan_precise
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
ftell
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fwrite
__acrt_iob_func
fflush
fseek
fclose
api-ms-win-crt-utility-l1-1-0
qsort
Sections
.text Size: 251KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ