Static task
static1
Behavioral task
behavioral1
Sample
ee87520b3c9d54f4c35d895354d7118a8934032aa65f7ab42077a322053f7582.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ee87520b3c9d54f4c35d895354d7118a8934032aa65f7ab42077a322053f7582.dll
Resource
win10v2004-20231020-en
General
-
Target
ee87520b3c9d54f4c35d895354d7118a8934032aa65f7ab42077a322053f7582
-
Size
975KB
-
MD5
289a7fa9231bc0ec2a3020fc8de17888
-
SHA1
97ed07a45c0c575493e4ae7dbf54f2da56ffafa3
-
SHA256
ee87520b3c9d54f4c35d895354d7118a8934032aa65f7ab42077a322053f7582
-
SHA512
92979d41cc6d62814989f07fe19deb3ae14adb9db0725e90240d03fd0bdbba0a5eb2e12a469ce874d134da23810841afb8a8d39503c93d5ce2650ef857a04892
-
SSDEEP
12288:SGZYAs5dj+h35l4MRB6PuXlDpLG07ysuwVyg85iDi4x/UZ+f+qhuIG:joah35lOuJwsuwQfUDiV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee87520b3c9d54f4c35d895354d7118a8934032aa65f7ab42077a322053f7582
Files
-
ee87520b3c9d54f4c35d895354d7118a8934032aa65f7ab42077a322053f7582.dll windows:6 windows x86
fe414baf17c2da55520277d092b85fbd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WriteProcessMemory
AllocConsole
SetConsoleTitleW
GetConsoleWindow
DisableThreadLibraryCalls
VirtualProtect
GetCurrentProcess
FlushInstructionCache
MultiByteToWideChar
IsBadReadPtr
VirtualProtectEx
ReadProcessMemory
CloseHandle
Sleep
GetModuleHandleA
GetProcAddress
LCMapStringW
GetModuleHandleW
TerminateProcess
IsBadWritePtr
FindResourceW
SizeofResource
LoadResource
LockResource
SetStdHandle
CreateFileW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
ReadConsoleW
WideCharToMultiByte
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
GetLocaleInfoEx
LCMapStringEx
CompareStringEx
GetCPInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleExW
HeapAlloc
HeapValidate
GetSystemInfo
ExitProcess
GetStdHandle
GetFileType
WriteFile
OutputDebugStringW
WriteConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
SetEndOfFile
user32
SetWindowPos
wsprintfW
Sections
.text Size: 693KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ