REGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
c47e69f14ac0aca530028b328a2226ad6df06c59ccc3b38342b65831c3688136.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
c47e69f14ac0aca530028b328a2226ad6df06c59ccc3b38342b65831c3688136.dll
Resource
win10v2004-20231127-en
General
-
Target
c47e69f14ac0aca530028b328a2226ad6df06c59ccc3b38342b65831c3688136
-
Size
896KB
-
MD5
ee5cee30beb836fd5f941716879aac3c
-
SHA1
22f05b8a9163bc0b392394580226546a3b0aec93
-
SHA256
c47e69f14ac0aca530028b328a2226ad6df06c59ccc3b38342b65831c3688136
-
SHA512
af54a3ae0b0667193f1f8ad68c16e6396d87238fee10029a1460da21ee5c82ba6b468644e6d1a960c3ca1369a74869c21871ce54e7acbad729c9997144aa4269
-
SSDEEP
12288:TBbhEkOx2Ivrip1HEZyrxLioDfKq0uDTuEWei1hz:TZOxM1HRhbyq0uDTu9z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c47e69f14ac0aca530028b328a2226ad6df06c59ccc3b38342b65831c3688136
Files
-
c47e69f14ac0aca530028b328a2226ad6df06c59ccc3b38342b65831c3688136.dll windows:5 windows x86 arch:x86
dbe7a19d6f87bea5fa39f06a553d0a8a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
boundscheck
rx_memmove_x
hw_snprintf_s
hw2_memcpy_s
hw2_memset_s
hw2_strcpy_s
kernel32
GetOEMCP
UnmapViewOfFile
VirtualFree
VirtualAlloc
MapViewOfFile
InterlockedIncrement
InterlockedDecrement
GetACP
WideCharToMultiByte
GetLastError
HeapFree
HeapAlloc
EncodePointer
DecodePointer
ReadFile
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
MultiByteToWideChar
Sleep
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
CloseHandle
GetConsoleCP
IsValidCodePage
RaiseException
GetCPInfo
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStringTypeW
LCMapStringW
HeapReAlloc
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
SetStdHandle
FlushFileBuffers
WriteConsoleW
CreateFileW
SetEndOfFile
CreateFileMappingA
Exports
Exports
Sections
.text Size: 630KB - Virtual size: 630KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 174KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ