Static task
static1
Behavioral task
behavioral1
Sample
260184a1998deff5f4286715102f8cd58908736cd0942989913a8eda7f57c263.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
260184a1998deff5f4286715102f8cd58908736cd0942989913a8eda7f57c263.dll
Resource
win10v2004-20230915-en
General
-
Target
260184a1998deff5f4286715102f8cd58908736cd0942989913a8eda7f57c263
-
Size
380KB
-
MD5
653a06002da2868eb7e05fc1425d7d67
-
SHA1
8757ba08c126a7ea7b519c6bb47d24bac66f9a5d
-
SHA256
260184a1998deff5f4286715102f8cd58908736cd0942989913a8eda7f57c263
-
SHA512
dac7bab356c32877e12545a7597eb7db291016e94f5811fc930ab4d9c1abaa75bc49edf1ec294fae8a16fe2816d1a5128205a36917592796e0c41b9234e502fd
-
SSDEEP
3072:bhAzC/pA+Fg8qpNd2dMucYzGNjmZqHUiTJv+MAvPD3u1ZzlLn5nCoExbk:NYNUMlYZqH9vwuL5nCjVk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 260184a1998deff5f4286715102f8cd58908736cd0942989913a8eda7f57c263
Files
-
260184a1998deff5f4286715102f8cd58908736cd0942989913a8eda7f57c263.dll windows:5 windows x86
588d62a3bdc892bd74dc25017b59c1fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WaitForSingleObject
GetCurrentThreadId
GetVersionExW
MultiByteToWideChar
Sleep
GetLastError
CreateFileA
LoadLibraryA
CloseHandle
CreateThread
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
GetCurrentProcessId
FreeLibrary
WideCharToMultiByte
VirtualFree
GetCurrentProcess
VirtualAlloc
GetSystemInfo
VirtualProtectEx
FlushInstructionCache
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
GetFileSize
ReadFile
DecodePointer
CreateFileW
HeapReAlloc
HeapSize
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
InterlockedFlushSList
SetLastError
RtlUnwind
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
FindClose
FindFirstFileExA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shlwapi
PathMatchSpecA
PathMatchSpecW
ws2_32
WSAStartup
inet_addr
send
socket
select
connect
inet_ntoa
getsockopt
htons
ioctlsocket
setsockopt
closesocket
WSAIoctl
ntohs
wininet
InternetCanonicalizeUrlA
InternetCrackUrlA
Sections
.text Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ