Static task
static1
Behavioral task
behavioral1
Sample
534c6fdb4f732a5f39bbc4eb32d28702.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
534c6fdb4f732a5f39bbc4eb32d28702.dll
Resource
win10v2004-20231215-en
General
-
Target
534c6fdb4f732a5f39bbc4eb32d28702
-
Size
158KB
-
MD5
534c6fdb4f732a5f39bbc4eb32d28702
-
SHA1
4a6c2529311088f0694b40f32e963b7aff42e9ab
-
SHA256
41b280f799dc2a20d95bcae1fad4da02912b7d57ac2fb53a12d06a2ac83292bf
-
SHA512
57a01888fe0934d9855c3855d1cd6d39ad9e951bf343392e5b48ee53368a51c847146f09df179d21c5383445c7008546bba33b95b7f630bd1baed784d33c726e
-
SSDEEP
3072:cKBNuGffD4Nui/Eui0BVuOJkiiVyuQny3CScCqnv/mOP:DBNpDTi/BM4qVyDyGd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 534c6fdb4f732a5f39bbc4eb32d28702
Files
-
534c6fdb4f732a5f39bbc4eb32d28702.dll windows:6 windows x86 arch:x86
d0c389a4adfe04d64879de9908777039
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
GetModuleHandleA
GetModuleHandleExW
GetModuleFileNameW
GetModuleHandleW
CreateFileW
HeapReAlloc
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedFlushSList
RaiseException
GetLastError
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetFileType
WriteConsoleW
ExitProcess
WriteFile
OutputDebugStringW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize
DecodePointer
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ