Static task
static1
Behavioral task
behavioral1
Sample
49c19323814d3cc60a16e51c75f38d50fb5c135c9fc79d405620a2e7a9960582.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
49c19323814d3cc60a16e51c75f38d50fb5c135c9fc79d405620a2e7a9960582.dll
Resource
win10v2004-20230703-en
General
-
Target
49c19323814d3cc60a16e51c75f38d50fb5c135c9fc79d405620a2e7a9960582
-
Size
11.7MB
-
MD5
9ac5361331cc3424d9265607e0dcee58
-
SHA1
f49b752750826f9856bebdc982a9a408068aca0c
-
SHA256
49c19323814d3cc60a16e51c75f38d50fb5c135c9fc79d405620a2e7a9960582
-
SHA512
cdd70e193992b0651cb8e5fd8194df2f286df517a295c5fd02b414f640c1a7c052e30ed4cab7f62b5e2c185fa36be062a787a2477ddcc0a590c66c1000273087
-
SSDEEP
196608:xzZdojC7f0cJyN1QlDtzBizXfJPksGHYXqTAxatSbhvNJl4BcNgwiK7rymXXLUAn:xlUS0cJ81YDqXBPksh0AxamhvNz4SaKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49c19323814d3cc60a16e51c75f38d50fb5c135c9fc79d405620a2e7a9960582
Files
-
49c19323814d3cc60a16e51c75f38d50fb5c135c9fc79d405620a2e7a9960582.dll windows x86
16b788a491da9667c3892a03117ae4a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SendMessageW
ws2_32
socket
netapi32
Netbios
ntdll
RtlUnwind
Sections
.text Size: - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4&n Size: - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BUs Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.\QR Size: 11.7MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ