DriverProc
Static task
static1
Behavioral task
behavioral1
Sample
1ed7c4483bbd224c8eabbe7810522db3de547021b6759de2ff6fbaaff8cec446.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1ed7c4483bbd224c8eabbe7810522db3de547021b6759de2ff6fbaaff8cec446.dll
Resource
win10v2004-20230915-en
General
-
Target
1ed7c4483bbd224c8eabbe7810522db3de547021b6759de2ff6fbaaff8cec446
-
Size
45KB
-
MD5
deb74d4b5f1bb5b31cf773f13f087bcc
-
SHA1
f759f6e32392f7039df1621b7af090f939ecf647
-
SHA256
1ed7c4483bbd224c8eabbe7810522db3de547021b6759de2ff6fbaaff8cec446
-
SHA512
7930a96c47adb70d94ea3d84467032851cfdf7452c3dd0ae1fed9318c52beb0614bf00b51001ee0393e699127dee50a02bb8d255e603a4838991c7313f916c39
-
SSDEEP
768:t96C471XEkcxo0OU4XPDBzd/aKbHsKSrbDZe:z6P7yxr6zoKr3KD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ed7c4483bbd224c8eabbe7810522db3de547021b6759de2ff6fbaaff8cec446
Files
-
1ed7c4483bbd224c8eabbe7810522db3de547021b6759de2ff6fbaaff8cec446.dll windows:6 windows x86
15796aa0017cf98b9c9210a208e6b7ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
winmm
DefDriverProc
user32
MessageBoxW
LoadStringW
msvcrt
_assert
_initterm
_amsg_exit
free
sprintf
bsearch
strcspn
strchr
memmove
strlen
strcmp
strcpy
memcmp
memcpy
kernel32
DisableThreadLibraryCalls
EnterCriticalSection
DeleteCriticalSection
TlsGetValue
LeaveCriticalSection
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
Sleep
SetLastError
LocalReAlloc
GetLastError
GetEnvironmentVariableA
LocalFree
LocalAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
InitializeCriticalSection
ntdll
vDbgPrintExWithPrefix
Exports
Exports
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ