Static task
static1
Behavioral task
behavioral1
Sample
1ac5a6877f73ab845a80adf3a6a77ec9ecd60ee3ae4456fa102b5fc20b309efa.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1ac5a6877f73ab845a80adf3a6a77ec9ecd60ee3ae4456fa102b5fc20b309efa.dll
Resource
win10v2004-20230703-en
General
-
Target
1ac5a6877f73ab845a80adf3a6a77ec9ecd60ee3ae4456fa102b5fc20b309efa
-
Size
81KB
-
MD5
ebaf719f60480fb530c78faf9dd66e03
-
SHA1
bc3221e3e0ceee15ee7553db41982bc00498b4c0
-
SHA256
1ac5a6877f73ab845a80adf3a6a77ec9ecd60ee3ae4456fa102b5fc20b309efa
-
SHA512
76679b82e139f13b5ac2834742e7fafef8a1bbf6d90f6f59ac12bf84ef32ad2c99c62bb1256431ad0d12d44fc6a7fd6794786f313fc38b6a28b3837594f11c1b
-
SSDEEP
1536:k76AB62SJkz8vXjIfsWbmUEfTSVk2dum1VgS+sWycdx7Kl/gN:2B6298vXE0mmUEfA1VgVx7Kl/gN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ac5a6877f73ab845a80adf3a6a77ec9ecd60ee3ae4456fa102b5fc20b309efa
Files
-
1ac5a6877f73ab845a80adf3a6a77ec9ecd60ee3ae4456fa102b5fc20b309efa.dll windows x86
042201cb6a3c86ecde4603a5b5d0bf17
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InitializeCriticalSectionEx
HeapSize
MultiByteToWideChar
GetLastError
DisableThreadLibraryCalls
HeapReAlloc
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
HeapFree
LoadLibraryExW
SetLastError
GetProcAddress
FreeLibrary
CreateFileW
GetConsoleOutputCP
GetModuleHandleW
WriteFile
FlushFileBuffers
GetStringTypeW
SetStdHandle
IsDebuggerPresent
OutputDebugStringW
RaiseException
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
SetFilePointerEx
GetConsoleMode
GetStdHandle
GetFileType
LCMapStringW
CloseHandle
WideCharToMultiByte
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ