Static task
static1
Behavioral task
behavioral1
Sample
40450cd9ae580260d01cf7abecec9a0c01f85a07b0b6f7c243f18a69f55fe147.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
40450cd9ae580260d01cf7abecec9a0c01f85a07b0b6f7c243f18a69f55fe147.dll
Resource
win10v2004-20230703-en
General
-
Target
40450cd9ae580260d01cf7abecec9a0c01f85a07b0b6f7c243f18a69f55fe147
-
Size
491KB
-
MD5
06d367504622f5ba6091edd6d5c9d8c2
-
SHA1
f21a87c0b16be12127f5be7203e9c21074dcbc9e
-
SHA256
40450cd9ae580260d01cf7abecec9a0c01f85a07b0b6f7c243f18a69f55fe147
-
SHA512
3c3e87b6cb0be829e85058a2658bf04177709743d96301aeb4fe799a7068bf54e38856fd58829e5f890ed30cd06d73ae50057dac89b3399d31f8bc475499dfb4
-
SSDEEP
6144:+hJoILdsbG2xyb9AYFsdu/wtYPeoUUfww2wCBe:SJ/B0yb9AYp/wt+5NwwPCBe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40450cd9ae580260d01cf7abecec9a0c01f85a07b0b6f7c243f18a69f55fe147
Files
-
40450cd9ae580260d01cf7abecec9a0c01f85a07b0b6f7c243f18a69f55fe147.dll windows x86
06605e1774198d61ffd994628d5b3223
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileA
GetFileSize
ReadFile
VirtualAlloc
CloseHandle
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
GetProcAddress
ExitProcess
GetCurrentThreadId
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetLastError
GetModuleFileNameA
WriteFile
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapAlloc
HeapSize
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ