Static task
static1
Behavioral task
behavioral1
Sample
408d298da21c04e384db710f53459eabb8f0c0f9cad464d57ea1c439d80bdaab.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
408d298da21c04e384db710f53459eabb8f0c0f9cad464d57ea1c439d80bdaab.dll
Resource
win10v2004-20230915-en
General
-
Target
408d298da21c04e384db710f53459eabb8f0c0f9cad464d57ea1c439d80bdaab
-
Size
375KB
-
MD5
4ec9b26a3a074b71f55eea2ce4345d09
-
SHA1
12b86e82fbda86ac1f225f6579866acc7fceb94e
-
SHA256
408d298da21c04e384db710f53459eabb8f0c0f9cad464d57ea1c439d80bdaab
-
SHA512
f070e70b2f5650cfe89beb03b455a4218db07ce2cb0508ab52ce2287b2e350f56f52e5dba651429a933393ed4012d572970fc13a6aa42e4be667dd02494319cf
-
SSDEEP
3072:+hAzC/pA+Fg8qpNd2dMucYzGNjmZqHUiTJv+MAvPD3u1ZzlLn5nCo3J5a7i:mYNUMlYZqH9vwuL5nCiJ5a+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 408d298da21c04e384db710f53459eabb8f0c0f9cad464d57ea1c439d80bdaab
Files
-
408d298da21c04e384db710f53459eabb8f0c0f9cad464d57ea1c439d80bdaab.dll windows:5 windows x86
588d62a3bdc892bd74dc25017b59c1fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WaitForSingleObject
GetCurrentThreadId
GetVersionExW
MultiByteToWideChar
Sleep
GetLastError
CreateFileA
LoadLibraryA
CloseHandle
CreateThread
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
GetCurrentProcessId
FreeLibrary
WideCharToMultiByte
VirtualFree
GetCurrentProcess
VirtualAlloc
GetSystemInfo
VirtualProtectEx
FlushInstructionCache
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
GetFileSize
ReadFile
DecodePointer
CreateFileW
HeapReAlloc
HeapSize
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
InterlockedFlushSList
SetLastError
RtlUnwind
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
FindClose
FindFirstFileExA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shlwapi
PathMatchSpecA
PathMatchSpecW
ws2_32
WSAStartup
inet_addr
send
socket
select
connect
inet_ntoa
getsockopt
htons
ioctlsocket
setsockopt
closesocket
WSAIoctl
ntohs
wininet
InternetCanonicalizeUrlA
InternetCrackUrlA
Sections
.text Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ