Static task
static1
Behavioral task
behavioral1
Sample
70229cad3d2f65fba32e4b66778b6692ec17a03aec79fd7ab493cb45416b9dbd.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
70229cad3d2f65fba32e4b66778b6692ec17a03aec79fd7ab493cb45416b9dbd.dll
Resource
win10v2004-20230915-en
General
-
Target
70229cad3d2f65fba32e4b66778b6692ec17a03aec79fd7ab493cb45416b9dbd
-
Size
17KB
-
MD5
c40d99d7718e24fa625d40cbcfc802c9
-
SHA1
4865c4fec817292527df0cbfe10afd173a5b4ff6
-
SHA256
70229cad3d2f65fba32e4b66778b6692ec17a03aec79fd7ab493cb45416b9dbd
-
SHA512
20f7e675b6c4dabb1465de03b0f14872b6cb95e67a2b2c94a7492c4ae815b657afd3aa06b6f01cb864a66e32c3998599fb943538e321715d7188ab40ce70e5be
-
SSDEEP
384:R8fTnMfkmdvhj9lIJ9ChLBfEMPjYCD3W45Bcy26l5Q:R8fTTmPj9iDCVJcCDj5ey35Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70229cad3d2f65fba32e4b66778b6692ec17a03aec79fd7ab493cb45416b9dbd
Files
-
70229cad3d2f65fba32e4b66778b6692ec17a03aec79fd7ab493cb45416b9dbd.dll windows:6 windows x86
6eebba0b07b2862464f1b68ac2ba97c2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InitializeCriticalSectionEx
HeapSize
GetLastError
DisableThreadLibraryCalls
HeapReAlloc
HeapAlloc
HeapDestroy
DeleteCriticalSection
HeapFree
GetModuleHandleW
VirtualProtect
GetProcAddress
FreeLibrary
VirtualQuery
LoadLibraryExA
GetSystemInfo
GetProcessHeap
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
OutputDebugStringW
RaiseException
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ