antiemu40
Static task
static1
Behavioral task
behavioral1
Sample
1611c21dfc0d142ac7df9d40994af685.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1611c21dfc0d142ac7df9d40994af685.dll
Resource
win10v2004-20231215-en
General
-
Target
1611c21dfc0d142ac7df9d40994af685
-
Size
808KB
-
MD5
1611c21dfc0d142ac7df9d40994af685
-
SHA1
6acf1131979470e6bad9aca606b4e8c0d982bb22
-
SHA256
e954091529be35692bc37be30ba5e13fd85a150c69a2c9c381158723e9707ccb
-
SHA512
4ea8087b9c5f93625871d34a8eec8e27dc75426d00d19555b06f91752098d567ee0f13d6798348f9d7460553809a30c004ffbeec7a731b4d420d7c78cecdeb54
-
SSDEEP
12288:Q/jUIv+j7aLA/or1ZDNwLFIE5Y421e3HI/20cvAAO7NNacTt4V47vV+fRVSL:mj1kaU/saZXY4XY/6vnO7TVTt4GvV+e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1611c21dfc0d142ac7df9d40994af685
Files
-
1611c21dfc0d142ac7df9d40994af685.dll windows:5 windows x86 arch:x86
21017e2fb1b53951a90fd4219a326c2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
HeapCreate
HeapAlloc
GetStartupInfoA
user32
GetClientRect
GetSystemMetrics
LoadIconA
GetParent
SendMessageA
IsIconic
EnableWindow
DrawIcon
gdi32
GetStockObject
advapi32
RegCloseKey
RegOpenKeyA
RegSetValueExA
shell32
SHBrowseForFolderA
netapi32
NetApiBufferReallocate
NetApiBufferAllocate
rasapi32
RasDeleteEntryA
msvcrt
__getmainargs
_acmdln
exit
_exit
_XcptFilter
__CxxFrameHandler
_onexit
_except_handler3
__p__commode
_adjust_fdiv
__dllonexit
__setusermatherr
_controlfp
_initterm
_setmbcp
__p__fmode
__set_app_type
Exports
Exports
Sections
.text Size: 796KB - Virtual size: 795KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cona Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.conb Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xedr Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ