dummy
Static task
static1
Behavioral task
behavioral1
Sample
ab918c09e6c7771a2b9d883f92aa60308b96b59b035b04956ac890919b6bfda3.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ab918c09e6c7771a2b9d883f92aa60308b96b59b035b04956ac890919b6bfda3.dll
Resource
win10v2004-20231020-en
General
-
Target
ab918c09e6c7771a2b9d883f92aa60308b96b59b035b04956ac890919b6bfda3
-
Size
49KB
-
MD5
8944810258add5e2d71b0b7443cfa82d
-
SHA1
7781f2ecbdae4c71c1b947d52ffc6edfdafeede9
-
SHA256
ab918c09e6c7771a2b9d883f92aa60308b96b59b035b04956ac890919b6bfda3
-
SHA512
cb47e16e22b6fe9fa50f144a4b5f3518fb549b0375751c5f402347fa19ced06d04646c74423a8668b55532f1b5cd9244cf410dd2000e0f85dbae6e1e2d964c56
-
SSDEEP
768:HEMGWRPiy6xB8MAxYhiy3IfLgEeZ/+eGzN:kMGWGb8MKYhicITxQ/2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab918c09e6c7771a2b9d883f92aa60308b96b59b035b04956ac890919b6bfda3
Files
-
ab918c09e6c7771a2b9d883f92aa60308b96b59b035b04956ac890919b6bfda3.dll windows:6 windows x64 arch:x64
1707bbd6997faea0de29a89a3938b0e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameW
GetCurrentThread
FlushInstructionCache
SetThreadContext
GetThreadContext
ResumeThread
InitializeSListHead
SuspendThread
GetCurrentThreadId
GetCurrentProcess
GetLastError
VirtualProtect
VirtualFree
VirtualQuery
SetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExW
LoadLibraryExA
GetProcAddress
FreeLibrary
VirtualAlloc
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memset
memmove
__std_exception_destroy
__std_exception_copy
__C_specific_handler
_CxxThrowException
memcpy
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_register_onexit_function
api-ms-win-crt-filesystem-l1-1-0
_waccess_s
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ