Static task
static1
Behavioral task
behavioral1
Sample
e314db97dfc8a9aae71cdb668cf50defc99228d6af1302ac83c1951d51d45a5c.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e314db97dfc8a9aae71cdb668cf50defc99228d6af1302ac83c1951d51d45a5c.dll
Resource
win10v2004-20230703-en
General
-
Target
e314db97dfc8a9aae71cdb668cf50defc99228d6af1302ac83c1951d51d45a5c
-
Size
11.3MB
-
MD5
64324a2a528bcd2e6bc01a34a1374b66
-
SHA1
0c9ae4d2baef203f45027a1798d5a94b6a485ba0
-
SHA256
e314db97dfc8a9aae71cdb668cf50defc99228d6af1302ac83c1951d51d45a5c
-
SHA512
5e8b18281990af1dc08bb05d1b437e6fd047bbbc05553cf0c201a8a5d04e9d4a08a178f08c42d72ddd8ab5d5040c32d9d2df1faba76b00fe84faed544f9b06cd
-
SSDEEP
196608:JGxkZPAbU4BMW14e2PgpXnD7P12chJ+ePcMX0IL+/DKBGXAQ:JGxkZYxb14BID7PhnX0xW2AQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e314db97dfc8a9aae71cdb668cf50defc99228d6af1302ac83c1951d51d45a5c
Files
-
e314db97dfc8a9aae71cdb668cf50defc99228d6af1302ac83c1951d51d45a5c.dll windows x86
88732167517e6d52f658d4f50a4f51ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RaiseException
MultiByteToWideChar
WideCharToMultiByte
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
GetCurrentProcess
TerminateProcess
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
HeapValidate
GetSystemInfo
GetStdHandle
GetFileType
WriteFile
OutputDebugStringA
OutputDebugStringW
WriteConsoleW
CloseHandle
WaitForSingleObjectEx
CreateThread
SetConsoleCtrlHandler
GetCurrentThread
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
HeapReAlloc
HeapSize
HeapQueryInformation
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
EncodePointer
DecodePointer
CreateFileW
Sections
.textbss Size: - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 587KB - Virtual size: 586KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10.6MB - Virtual size: 10.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ