Static task
static1
Behavioral task
behavioral1
Sample
b5c20a5c38ee8d0d8112e159e4ef534ff5b8e32fa08d97528354e7940fa773b4.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b5c20a5c38ee8d0d8112e159e4ef534ff5b8e32fa08d97528354e7940fa773b4.dll
Resource
win10v2004-20230703-en
General
-
Target
b5c20a5c38ee8d0d8112e159e4ef534ff5b8e32fa08d97528354e7940fa773b4
-
Size
133KB
-
MD5
27e41d217e8c7cda96e8148ed5f13e75
-
SHA1
d61dde852434662e6e62592dccbd1039be8dd535
-
SHA256
b5c20a5c38ee8d0d8112e159e4ef534ff5b8e32fa08d97528354e7940fa773b4
-
SHA512
299af08ba54d3c1a87e937068c1610cd560e7df7392335f01144972bd0e65724ad68f50cfedae574f3adf34a12cd11a2bbacbf641be463707267a17aa977f132
-
SSDEEP
1536:cZ4Tyyiy+4WD8jSSSSSXSSSSSS2lWw2FBBBGYcz9b4xbe:y4TyXL8jSSSSSXSSSSSS2lf2yJ9sd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5c20a5c38ee8d0d8112e159e4ef534ff5b8e32fa08d97528354e7940fa773b4
Files
-
b5c20a5c38ee8d0d8112e159e4ef534ff5b8e32fa08d97528354e7940fa773b4.dll windows x86
d056332cf3b8d6b9c5dfda1fdbccf8ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcr90
_lock
__dllonexit
_except_handler4_common
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_onexit
_encode_pointer
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 658B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ