Static task
static1
Behavioral task
behavioral1
Sample
01baa0f83c6b3c520d456cb246243fea8e7f9bd00d55e2767f225ba76899cc38.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
01baa0f83c6b3c520d456cb246243fea8e7f9bd00d55e2767f225ba76899cc38.dll
Resource
win10v2004-20230915-en
General
-
Target
01baa0f83c6b3c520d456cb246243fea8e7f9bd00d55e2767f225ba76899cc38
-
Size
372KB
-
MD5
6a699cb0920c551550c2b832fe56aca0
-
SHA1
80faf44f6faef92ebbc00259671607a9f0daa6a2
-
SHA256
01baa0f83c6b3c520d456cb246243fea8e7f9bd00d55e2767f225ba76899cc38
-
SHA512
8b4fc1d57b419471598d8c10f9d19cef918cda5b80926bf9b56699a58f81d6e918e0b9bc42fd12baa2a6a12da13d9f128360b97492b627644588ddcd202bf3bf
-
SSDEEP
3072:JV9DatNw++ULIw4zUKLJtOJxRy+9xYUhvCsl7kb1v5hmsw8Gmx94z7Q9aje0tbRt:1G140xNhvCH1vYCf4h0cAOItPOJW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01baa0f83c6b3c520d456cb246243fea8e7f9bd00d55e2767f225ba76899cc38
Files
-
01baa0f83c6b3c520d456cb246243fea8e7f9bd00d55e2767f225ba76899cc38.dll windows:6 windows x86
269e7cff5c52cee6bd290ef4c01a4431
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeLibrary
IsBadReadPtr
TerminateProcess
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
CloseHandle
DecodePointer
DeleteCriticalSection
FindNextFileW
GetProcessHeap
FindClose
GetFileAttributesW
DeleteFileW
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
CreateFileW
SetEndOfFile
SetFilePointer
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetProcAddress
HeapAlloc
GetNativeSystemInfo
LoadLibraryA
VirtualAlloc
GetACP
IsValidCodePage
SetStdHandle
ReadConsoleW
VirtualFree
SetLastError
HeapFree
VirtualProtect
GetModuleFileNameW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetStdHandle
SetFilePointerEx
GetFileSizeEx
ExitProcess
FindFirstFileExW
GetFileType
ReadFile
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
WriteConsoleW
RtlUnwind
RaiseException
OutputDebugStringW
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
CreateEventW
UnhandledExceptionFilter
user32
MessageBoxW
ws2_32
socket
gethostbyname
closesocket
connect
htons
inet_addr
recv
send
setsockopt
wininet
HttpQueryInfoW
HttpQueryInfoA
HttpSendRequestW
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestW
HttpOpenRequestA
InternetReadFile
InternetConnectW
InternetConnectA
InternetCloseHandle
InternetOpenW
winhttp
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpReadData
WinHttpOpen
WinHttpSetTimeouts
WinHttpConnect
WinHttpCloseHandle
Sections
.text Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tvm0 Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ