GetNewInf
Static task
static1
Behavioral task
behavioral1
Sample
704d86e3add7936b20405f0f4ef430d010b3bbb0f06c0424df328a2388816c3a.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
704d86e3add7936b20405f0f4ef430d010b3bbb0f06c0424df328a2388816c3a.dll
Resource
win10v2004-20230703-en
General
-
Target
704d86e3add7936b20405f0f4ef430d010b3bbb0f06c0424df328a2388816c3a
-
Size
2.4MB
-
MD5
21cc0a11bf2b2025af5145f48f2074ab
-
SHA1
b5fd77081271af6c7b67a6b465d9569256b7e6b1
-
SHA256
704d86e3add7936b20405f0f4ef430d010b3bbb0f06c0424df328a2388816c3a
-
SHA512
f0e235986f2129e2fb8cef03fde527fd41d61bdc5a7ec54b5fea2038c75170ba22589150fe8eb3525375cb6f2a5435c5b7eba064a8f27ecbd8c82de8ce98b94b
-
SSDEEP
49152:aSDoLOlXFpWW8rGUCwQfTFJT2JxH4em8sKUfc3WBn4gfl0KEkh/+JNVU4sUYI87L:3B78UYZksUo7MX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 704d86e3add7936b20405f0f4ef430d010b3bbb0f06c0424df328a2388816c3a
Files
-
704d86e3add7936b20405f0f4ef430d010b3bbb0f06c0424df328a2388816c3a.dll windows x86
1e2872f10792609a583dff6b57cf4142
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
MultiByteToWideChar
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetCurrentProcessId
WriteFile
ReadFile
CloseHandle
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
GetTempPathA
CreateFileA
GlobalAlloc
GlobalLock
GlobalUnlock
WideCharToMultiByte
SetEndOfFile
WriteConsoleW
HeapReAlloc
HeapSize
SetFilePointerEx
CreateFileW
SetStdHandle
GetConsoleCP
FlushFileBuffers
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
LCMapStringW
GetStdHandle
GetFileType
GetConsoleMode
ReadConsoleW
GetACP
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
DecodePointer
user32
GetParent
GetPropA
IsWindowVisible
SetWindowPos
ShowWindowAsync
EnumChildWindows
LoadCursorA
MessageBoxA
SetPropA
CreateWindowExA
RegisterClassA
wsprintfA
DefWindowProcW
Exports
Exports
Sections
.text Size: 569KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ