Static task
static1
Behavioral task
behavioral1
Sample
0e98257241ed863c0ee2d7f97da9a79d4b53ea9cfe89078a629630b853fe5c8b.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0e98257241ed863c0ee2d7f97da9a79d4b53ea9cfe89078a629630b853fe5c8b.dll
Resource
win10v2004-20230703-en
General
-
Target
0e98257241ed863c0ee2d7f97da9a79d4b53ea9cfe89078a629630b853fe5c8b
-
Size
241KB
-
MD5
1b2b5c8acd3e401b8d8fabd89ac5713e
-
SHA1
a553f1d9d1b9e4c370f73c358410f318ed0fd2ff
-
SHA256
0e98257241ed863c0ee2d7f97da9a79d4b53ea9cfe89078a629630b853fe5c8b
-
SHA512
9de190ac4ed3016c9130d50394242f089a2c7756fb191e4ba0e215a8477fd54bf3a6774a3e5720b8e8cc580f42cc04884ac6e8b4b135834e53429c66c8fa6f3f
-
SSDEEP
1536:5cwHEoM5lRFpWyfrpNYA/9mRBWhxcx4OG5GXFu:CwHEoM5nFYM9NKRBWhWx4O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e98257241ed863c0ee2d7f97da9a79d4b53ea9cfe89078a629630b853fe5c8b
Files
-
0e98257241ed863c0ee2d7f97da9a79d4b53ea9cfe89078a629630b853fe5c8b.dll windows x86
363207563a4ad8e14ab26a1e3788d33d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc120u
ord8352
ord10314
ord12799
ord12736
ord4546
ord7881
ord8206
ord5262
ord2444
ord12413
ord12412
ord14448
ord7806
ord14454
ord9279
ord4109
ord4047
ord12818
ord7825
ord1992
ord11858
ord11857
ord14326
ord12402
ord7542
ord14526
ord6251
ord14528
ord6253
ord14527
ord6252
ord992
ord6758
ord3809
ord5821
ord12114
ord8099
ord12126
ord12094
ord5157
ord5454
ord5664
ord9231
ord5430
ord5667
ord5160
ord5316
ord5137
ord7609
ord7610
ord7600
ord8268
ord1467
ord7884
ord12122
ord3806
ord1509
ord325
ord1050
ord2323
ord2204
ord324
ord1049
ord2366
ord2369
ord2334
ord2368
ord485
ord2226
ord2332
ord2142
ord2258
ord2357
ord5314
ord8101
ord10131
ord9090
ord1508
msvcr120
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
??2@YAPAXI@Z
__CxxFrameHandler3
memset
free
kernel32
OutputDebugStringW
GetLastError
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
EncodePointer
LocalFree
LocalAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
DecodePointer
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 230KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ