Static task
static1
Behavioral task
behavioral1
Sample
afe90573c8335839f934b18318c25ab4d4e9fa8842b38022ac4f128f12c659df.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
afe90573c8335839f934b18318c25ab4d4e9fa8842b38022ac4f128f12c659df.dll
Resource
win10v2004-20230703-en
General
-
Target
afe90573c8335839f934b18318c25ab4d4e9fa8842b38022ac4f128f12c659df
-
Size
290KB
-
MD5
090fa661c29d82f9803261e792aa12a3
-
SHA1
12692d7b1c773731936b2d00dced806684566c75
-
SHA256
afe90573c8335839f934b18318c25ab4d4e9fa8842b38022ac4f128f12c659df
-
SHA512
60cd326978333b846025f1f37e65558aba061280895e2494cf83f22995ffa985166ae3a960308a51c1099481b57dda16de771ec21894387082ff1c449c45a04d
-
SSDEEP
6144:IZOfNBXryosW9AR/Y7HA3eJri6c1JrZ3rTn/eiGwDiy1m:IoyWG83hi6c1JrZ3rTn/eiVDiy1m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afe90573c8335839f934b18318c25ab4d4e9fa8842b38022ac4f128f12c659df
Files
-
afe90573c8335839f934b18318c25ab4d4e9fa8842b38022ac4f128f12c659df.dll windows x86
52a136e019ca9287909caf773293074e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc100u
ord13267
ord10976
ord14162
ord1739
ord7126
ord11864
ord3625
ord3684
ord8530
ord13387
ord7108
ord11469
ord11477
ord11476
ord2164
ord4744
ord13854
ord11784
ord7548
ord7624
ord1292
ord7179
ord13570
ord13567
ord13572
ord13569
ord13571
ord13568
ord3416
ord5261
ord11228
ord11236
ord4086
ord7391
ord9498
ord11240
ord11209
ord11845
ord7176
ord4642
ord4923
ord5115
ord8483
ord4901
ord5118
ord4645
ord4794
ord4623
ord6931
ord6932
ord6922
ord4792
ord7393
ord9328
ord8346
ord6140
ord890
ord6869
ord13381
ord1300
ord908
ord13605
ord2091
ord322
ord2055
ord2053
ord2080
ord1984
ord2045
ord3413
ord408
ord1953
ord2090
ord2088
ord1945
ord1873
ord1934
ord323
ord1301
msvcr100
_crt_debugger_hook
__CxxFrameHandler3
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
??2@YAPAXI@Z
kernel32
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
LocalFree
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
LocalAlloc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ