Static task
static1
Behavioral task
behavioral1
Sample
a48b113c30be9548f8837350c23edcb285e85187c7ed2b94bdfd32db11f35623.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
a48b113c30be9548f8837350c23edcb285e85187c7ed2b94bdfd32db11f35623.dll
Resource
win10v2004-20231020-en
General
-
Target
a48b113c30be9548f8837350c23edcb285e85187c7ed2b94bdfd32db11f35623
-
Size
149KB
-
MD5
4269d7b58de81d46f87ede7c48df4ead
-
SHA1
738e6c3d5c2e60576bd5e8246530ec823803cbb4
-
SHA256
a48b113c30be9548f8837350c23edcb285e85187c7ed2b94bdfd32db11f35623
-
SHA512
62c60ee7dba38f59b237470b3221b2b5b8dc5fc24b2c06edc3f2b528519f385fe9a7136b20fd0ab597e58e69c5dcc28fb37dcbe7f1d715a8dde6fbee3bd1a12a
-
SSDEEP
3072:t+zCn02X5xOePWTQLAPQSAg0FuS+VnCWe+w:AzCnpPGAOSzWe+w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a48b113c30be9548f8837350c23edcb285e85187c7ed2b94bdfd32db11f35623
Files
-
a48b113c30be9548f8837350c23edcb285e85187c7ed2b94bdfd32db11f35623.dll windows:6 windows x86
bec926919d7f80405f1ba5213c334499
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FindClose
LoadLibraryExW
GetCurrentThreadId
CreateFileW
FlushFileBuffers
WriteFile
GetStdHandle
GetACP
GetModuleFileNameA
CreateEventW
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
ExitProcess
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
GetModuleHandleExW
InterlockedFlushSList
RtlUnwind
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FindNextFileA
GetModuleHandleW
FreeLibrary
FindResourceExW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapSize
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetStdHandle
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
OutputDebugStringW
GetStringTypeW
EncodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
GetCPInfo
IsDebuggerPresent
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ