Static task
static1
Behavioral task
behavioral1
Sample
c2b1f18f4c269e603f0a7595e1780b4f0a2631484a5c2c2cd9eb9faacf39bc6d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c2b1f18f4c269e603f0a7595e1780b4f0a2631484a5c2c2cd9eb9faacf39bc6d.dll
Resource
win10-20231220-en
General
-
Target
c2b1f18f4c269e603f0a7595e1780b4f0a2631484a5c2c2cd9eb9faacf39bc6d
-
Size
2.2MB
-
MD5
7141bd0372c9fbb80710a8ebb2687a5c
-
SHA1
ae00b8846506d72ab2cb57b1c59c33e55c3a5c18
-
SHA256
c2b1f18f4c269e603f0a7595e1780b4f0a2631484a5c2c2cd9eb9faacf39bc6d
-
SHA512
327a0155134a5f8521c5499f43f7a436930b5f846207581716f9e9dab4db6931d6d44dc67401550dc8587f4caffe193f7bc62cab6f18d3dc0fdcdbf6743ce1e5
-
SSDEEP
49152:KJAvWkHDkNzuf+rckvtEY6RKCNViYl/efUhynGBKy5B:mAwhLre1RvNoleyGj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2b1f18f4c269e603f0a7595e1780b4f0a2631484a5c2c2cd9eb9faacf39bc6d
Files
-
c2b1f18f4c269e603f0a7595e1780b4f0a2631484a5c2c2cd9eb9faacf39bc6d.dll windows:5 windows x86 arch:x86
93b246aae57ad9b9543edacd156803d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
WSAGetLastError
kernel32
SetStdHandle
ConnectNamedPipe
CreateEventA
WaitForSingleObjectEx
QueryPerformanceCounter
LoadLibraryExW
CloseHandle
GetModuleFileNameW
DeleteCriticalSection
OutputDebugStringA
SetCurrentDirectoryA
oleaut32
SafeArrayCreate
GetRecordInfoFromGuids
shell32
SHGetFileInfoW
setupapi
SetupDiEnumDeviceInfo
user32
DrawMenuBar
ShowWindow
AdjustWindowRect
gdi32
PtVisible
SetSystemPaletteUse
rpcrt4
I_RpcBindingInqLocalClientPID
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 520KB - Virtual size: 519KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 168KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ