Static task
static1
Behavioral task
behavioral1
Sample
32b8bd32e6180413b8045b482ed180cb.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
32b8bd32e6180413b8045b482ed180cb.dll
Resource
win10v2004-20231215-en
General
-
Target
32b8bd32e6180413b8045b482ed180cb
-
Size
64KB
-
MD5
32b8bd32e6180413b8045b482ed180cb
-
SHA1
d20c0379a386ac7ac94d1f92e0c1cfc12b5aab6a
-
SHA256
8f70a47f1bf0d8c7e0808e171aa6b2177512a251ab0dab20666e7639a20c068c
-
SHA512
b1cbec5e9534d8d0fd1cbb107d83ef39368e7d13abff314f21fb8c9b9ef83af396c3a76053a1077ca04ac6087700840cf6561186a7fd3314030eae60fa173657
-
SSDEEP
1536:+Rj+tvmjetxquQxXCQi50PgucnoYYuEZ9VWWFhdS+9V2:u+tv6KUJu8ino/B2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32b8bd32e6180413b8045b482ed180cb
Files
-
32b8bd32e6180413b8045b482ed180cb.dll windows:4 windows x86 arch:x86
5770941fe6064ae5798d5dfec67899c3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WideCharToMultiByte
WinExec
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentThreadId
Sleep
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
GetLastError
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
CloseHandle
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapFree
HeapAlloc
TlsAlloc
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
oleaut32
SysStringLen
LoadRegTypeLi
SysFreeString
VariantClear
atl
ord30
ord58
ord32
ord57
ord18
ord15
ord16
ord21
ord23
ord31
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE