sjvwwxfh
Static task
static1
Behavioral task
behavioral1
Sample
13a83b956cd00b90c2668385e7d479c0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13a83b956cd00b90c2668385e7d479c0.dll
Resource
win10v2004-20231222-en
General
-
Target
13a83b956cd00b90c2668385e7d479c0
-
Size
629KB
-
MD5
13a83b956cd00b90c2668385e7d479c0
-
SHA1
8ccdb6b8e89cbabc9a688831fafbb24e7fa5c19a
-
SHA256
70c2326bbc506db6cbe45870221bb51b11c29aaca0d9a1c3aef9338e4deec00e
-
SHA512
dd846a9b8e5c99f647623a5f9a061570627295fbbcc35536e6d9c6f3226827c5d6ef20191c2c29cade04c75c18fb70b1b6b81a53f7b5fd39fe8fac1d540a6581
-
SSDEEP
6144:fPNHbZWzH0cA/cTBJbAE17Poq/J8RcKTyjbaKMvqhWolVL7iFO3JJCO1GRuU5pH6:fP2zH0V/cFWJcKejbaKgo3pHNG7H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13a83b956cd00b90c2668385e7d479c0
Files
-
13a83b956cd00b90c2668385e7d479c0.dll windows:4 windows x86 arch:x86
11ac2b66d60bf8f371750c0d14b89155
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeEnvironmentStringsA
LeaveCriticalSection
SetLastError
GetCurrentThreadId
ConnectNamedPipe
WaitForMultipleObjects
HeapAlloc
LCMapStringA
IsBadReadPtr
GetVersionExA
InitializeCriticalSection
ResetEvent
lstrcatW
HeapFree
GetSystemInfo
DeleteCriticalSection
WaitForSingleObject
DuplicateHandle
GetStdHandle
EnterCriticalSection
GetLocaleInfoA
LoadLibraryA
GetLastError
GetCPInfo
IsBadCodePtr
CreateTimerQueueTimer
GetOEMCP
WriteFile
GetModuleHandleA
SetUnhandledExceptionFilter
QueryPerformanceCounter
UnhandledExceptionFilter
GetStartupInfoA
GetEnvironmentStringsW
CreateNamedPipeA
GetACP
OpenProcess
SetEvent
ReleaseMutex
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchangeAdd
WideCharToMultiByte
GetTickCount
UnmapViewOfFile
RtlUnwind
FreeEnvironmentStringsW
InterlockedExchange
MultiByteToWideChar
HeapDestroy
GetEnvironmentStrings
GetFileType
InterlockedCompareExchange
IsBadWritePtr
lstrcpyW
InterlockedDecrement
CreateMutexW
GetModuleFileNameA
LCMapStringW
ExitThread
GetBinaryTypeA
DisconnectNamedPipe
TerminateProcess
CreateEventA
DeleteTimerQueueTimer
user32
wsprintfW
LoadIconA
DrawIcon
CreateIconFromResource
advapi32
InitializeSecurityDescriptor
GetUserNameA
SetSecurityDescriptorDacl
msvcrt
_stricmp
_wtoi
_wcsnset
fflush
vwprintf
_strnicmp
memset
towupper
wcstol
wcsstr
_ltow
wcscmp
printf
wcstod
strtok
wprintf
calloc
memcpy
wcscpy
wcslen
realloc
fprintf
wcscat
fgetws
wcsncmp
malloc
memmove
wcschr
isdigit
swprintf
scanf
free
wcstok
exit
Exports
Exports
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 559KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ