Static task
static1
Behavioral task
behavioral1
Sample
05a1b2d0a8a2baafd803b806f3bb6b6c416d8d3a11e0ef4bd5a11edb82cf909e.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
05a1b2d0a8a2baafd803b806f3bb6b6c416d8d3a11e0ef4bd5a11edb82cf909e.dll
Resource
win10v2004-20231025-en
General
-
Target
05a1b2d0a8a2baafd803b806f3bb6b6c416d8d3a11e0ef4bd5a11edb82cf909e
-
Size
150KB
-
MD5
5b70ca48f848691435e90f499640bf1a
-
SHA1
8b43619b21228514c29a7a45a9926b35e1bd1189
-
SHA256
05a1b2d0a8a2baafd803b806f3bb6b6c416d8d3a11e0ef4bd5a11edb82cf909e
-
SHA512
188a2d1dfe62521eab2d5904ee9c1d25e779185447a7b5943315e7d3033f9e8340982ba43355988903fdc94e09560ded138fa0e93adf49114d010b8a1243aa2e
-
SSDEEP
3072:5YQl4YWyMJuiyquNj+xnum7+DOx7e+woZ+JaTaf2hkNStE5d:5YQlwvyDNj+huIsee+VEJaWfmtE5d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05a1b2d0a8a2baafd803b806f3bb6b6c416d8d3a11e0ef4bd5a11edb82cf909e
Files
-
05a1b2d0a8a2baafd803b806f3bb6b6c416d8d3a11e0ef4bd5a11edb82cf909e.dll windows:6 windows x86 arch:x86
2b8c32c8d9c008b3ee08e8fd0cab7353
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CompareStringW
CreateFileW
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExA
FindNextFileA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetThreadLocale
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
ReadConsoleW
ReadFile
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
WideCharToMultiByte
WriteConsoleW
WriteFile
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ