Static task
static1
Behavioral task
behavioral1
Sample
chall1.dll
Resource
win10-20231020-en
General
-
Target
chall1.dll
-
Size
432KB
-
MD5
f28f39ada498d66c378fd59227e0f215
-
SHA1
1c9c0584ad51f5be3f16b334d758c88b8cdb7b38
-
SHA256
0a66e8376fc6d9283e500c6e774dc0a109656fd457a0ce7dbf40419bc8d50936
-
SHA512
33e4035a35c204da87d5c5935dcc81020101cfb9001a1f08c6fe5c374d1bfaa888783c7d735d43de483d5b6235e883e797e0855bed548ff4aa8dbab1b8addf1b
-
SSDEEP
6144:rFpWDfyexlJJtyhOhevp/D23qAGzjLg8O9YTEqT2uGRp1WgHyo3NldzlQgOsnGWU:rFpoFlJqYhiVDwGU8OqaX1WW3zNg7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource chall1.dll
Files
-
chall1.dll.dll windows:5 windows x86 arch:x86
0bedc9af0ed7cf2ba33cf662a24d448e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EraseTape
GetDiskFreeSpaceExA
lstrlenA
LocalHandle
GetModuleFileNameA
GetBinaryTypeA
GetThreadLocale
GetFileTime
GlobalFlags
GetStringTypeA
EnumResourceTypesA
GetConsoleCP
GetCommTimeouts
WriteProcessMemory
GlobalMemoryStatus
DebugBreak
oleaut32
GetRecordInfoFromTypeInfo
LoadTypeLibEx
user32
DefMDIChildProcW
GetMenuItemRect
MessageBoxIndirectW
DeleteMenu
GetClassNameA
GetMessagePos
GetUpdateRgn
GetClientRect
GetScrollBarInfo
gdi32
ExtSelectClipRgn
GetBkColor
GetCharWidthFloatA
GetTextMetricsW
GdiComment
advapi32
EnumServicesStatusExW
InitiateSystemShutdownExW
RegGetValueA
msvcrt
strcoll
fgetwc
srand
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erloc Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ