Static task
static1
Behavioral task
behavioral1
Sample
3b237ee180c4dfb342f493ab68cc25414e1d8af3fea6885a0429d6128ba8dda6.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3b237ee180c4dfb342f493ab68cc25414e1d8af3fea6885a0429d6128ba8dda6.dll
Resource
win10v2004-20230915-en
General
-
Target
3b237ee180c4dfb342f493ab68cc25414e1d8af3fea6885a0429d6128ba8dda6
-
Size
721KB
-
MD5
82b518ee5a7f0ecfaf5764f6d5e4f75a
-
SHA1
acd65435d124204e20011ddaddd6c18ee2d53b97
-
SHA256
3b237ee180c4dfb342f493ab68cc25414e1d8af3fea6885a0429d6128ba8dda6
-
SHA512
1fa98cfa8f849af052bf94785119ebfce9977723c2eef38b72747f256361b76a0b6892e7baa40f75c519928dab2b9cae4e158a7f4d4154e11c30aaed399905e2
-
SSDEEP
6144:qG140xNhvCH1vYCf4h0cAOIBrPK+G57s3TMw9n/ABtRv51kjX/Vd:qG140xzafQ8rPKJRs3TTn4B7v51kjXd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b237ee180c4dfb342f493ab68cc25414e1d8af3fea6885a0429d6128ba8dda6
Files
-
3b237ee180c4dfb342f493ab68cc25414e1d8af3fea6885a0429d6128ba8dda6.dll windows:6 windows x86
269e7cff5c52cee6bd290ef4c01a4431
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeLibrary
IsBadReadPtr
TerminateProcess
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
CloseHandle
DecodePointer
DeleteCriticalSection
FindNextFileW
GetProcessHeap
FindClose
GetFileAttributesW
DeleteFileW
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
CreateFileW
SetEndOfFile
SetFilePointer
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetProcAddress
HeapAlloc
GetNativeSystemInfo
LoadLibraryA
VirtualAlloc
GetACP
IsValidCodePage
SetStdHandle
ReadConsoleW
VirtualFree
SetLastError
HeapFree
VirtualProtect
GetModuleFileNameW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetStdHandle
SetFilePointerEx
GetFileSizeEx
ExitProcess
FindFirstFileExW
GetFileType
ReadFile
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
WriteConsoleW
RtlUnwind
RaiseException
OutputDebugStringW
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
CreateEventW
UnhandledExceptionFilter
user32
MessageBoxW
ws2_32
socket
gethostbyname
closesocket
connect
htons
inet_addr
recv
send
setsockopt
wininet
HttpQueryInfoW
HttpQueryInfoA
HttpSendRequestW
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestW
HttpOpenRequestA
InternetReadFile
InternetConnectW
InternetConnectA
InternetCloseHandle
InternetOpenW
winhttp
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpReadData
WinHttpOpen
WinHttpSetTimeouts
WinHttpConnect
WinHttpCloseHandle
Sections
.text Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tvm0 Size: 450KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ