Static task
static1
Behavioral task
behavioral1
Sample
429b52194700375984c7a5a46891dd037292f643478d10ec7d9393611f022ada.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
429b52194700375984c7a5a46891dd037292f643478d10ec7d9393611f022ada.dll
Resource
win10v2004-20230915-en
General
-
Target
429b52194700375984c7a5a46891dd037292f643478d10ec7d9393611f022ada
-
Size
808KB
-
MD5
62e5dd45f640592d499c3bd649155ea6
-
SHA1
c3fc76a3b16eebe9eb46e425aa2d703f9a690b0f
-
SHA256
429b52194700375984c7a5a46891dd037292f643478d10ec7d9393611f022ada
-
SHA512
19d73e0fbc198de200af927ca8d6c4b058ba65f32fe26b38da8e3789ce62a947a7149343dc669c9d63c9b05424517cc168ed05ea664334ac863076559a877c2a
-
SSDEEP
12288:+keL8xF5NyujYjHrWmtH77uuo3QsQ110qdrRodJAou33QzkYBf7a/CziwgHy:+keL3KmtH7Sb3Uv8JA5nQBBf7aqijS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429b52194700375984c7a5a46891dd037292f643478d10ec7d9393611f022ada
Files
-
429b52194700375984c7a5a46891dd037292f643478d10ec7d9393611f022ada.dll windows:5 windows x86
acf6e8d65e87d58e47063aab869005cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
libxsse
ord60
ord12
libxsse_exrec_alloc
libxsse_register_exunit
ord11
ord10
kernel32
TlsAlloc
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
GetTimeZoneInformation
WriteConsoleW
InterlockedDecrement
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLocalTime
DeleteCriticalSection
GetVersionExW
WideCharToMultiByte
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
RaiseException
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
SetEnvironmentVariableA
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
HeapSize
RtlUnwind
SetFilePointer
CloseHandle
LCMapStringA
MultiByteToWideChar
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
GetConsoleCP
GetConsoleMode
ReadFile
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetModuleHandleA
GetLocaleInfoW
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
Sections
.text Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ