SecGetSamUserName
Static task
static1
Behavioral task
behavioral1
Sample
1f4720a3bea0ae4abc77b90d03bf8e6905387e460f074cae35af81b662650afe.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1f4720a3bea0ae4abc77b90d03bf8e6905387e460f074cae35af81b662650afe.dll
Resource
win10v2004-20230831-en
General
-
Target
1f4720a3bea0ae4abc77b90d03bf8e6905387e460f074cae35af81b662650afe
-
Size
70KB
-
MD5
2a480b31ae5f86958abdb76adf30f454
-
SHA1
cb1f593f832a07beb6c1cf1a7c26ef60830f100a
-
SHA256
1f4720a3bea0ae4abc77b90d03bf8e6905387e460f074cae35af81b662650afe
-
SHA512
fe52515c77b8708374764100106e739fce6b3d1dd4db215bee44a0ef38742cef7101762e289fda47d51bc99e24849260b274d4d32f5bed295c915c8056ef6b3a
-
SSDEEP
1536:6fbFLX7sHWxBlYHaoO7gOwuT8HtwCUEqSlBwDbUq5Z:6zFLX4A1oJuTEGSEDbUq5Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f4720a3bea0ae4abc77b90d03bf8e6905387e460f074cae35af81b662650afe
Files
-
1f4720a3bea0ae4abc77b90d03bf8e6905387e460f074cae35af81b662650afe.dll windows x64
9b9c29b76a3d1fd9e44718c3e50fce3d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
secur32
GetUserNameExA
kernel32
GetCurrentThreadId
Sleep
GetLastError
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
CloseHandle
CreateFileA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
SetLastError
TerminateProcess
GetTickCount
LocalFree
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
SetFilePointer
FlushFileBuffers
SetStdHandle
HeapSize
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
HeapFree
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
RaiseException
RtlPcToFileHeader
HeapReAlloc
FlsSetValue
GetCommandLineA
HeapSetInformation
HeapCreate
HeapDestroy
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
WriteFile
GetConsoleCP
GetConsoleMode
GetModuleHandleW
ExitProcess
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
oleaut32
VariantClear
Exports
Exports
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ