Static task
static1
Behavioral task
behavioral1
Sample
734576425897b5a6ace6b0876a035181.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
734576425897b5a6ace6b0876a035181.dll
Resource
win10v2004-20231215-en
General
-
Target
734576425897b5a6ace6b0876a035181
-
Size
157KB
-
MD5
734576425897b5a6ace6b0876a035181
-
SHA1
c92719fd6a02038d970b25cb34bc3afb20566cc8
-
SHA256
3f4931a1cd23242df1530af32fdf258c269da3e49b951608707e610543c54de8
-
SHA512
0f98701752d4f7a0b98e3364d0276a1371252d7d3590efc6a68666eb2e2ea797f63819f10127c9e9c58f4e2d4ef1163ab5e95eaef26457b10268e585cfe9cbab
-
SSDEEP
3072:AvZH86iEJbA8DUkWOYJXCRKFFrGolEMqqDLy/Hn+Pe/4NKCnsb:AvNG6eOYJKw1GeqqDLuHsOuKqs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 734576425897b5a6ace6b0876a035181
Files
-
734576425897b5a6ace6b0876a035181.dll windows:4 windows x86 arch:x86
794a4f6f44db2d02e7579c556801b710
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
QueryDosDeviceW
GetSystemDirectoryW
Sleep
TlsGetValue
FormatMessageA
GetSystemInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetLogicalDriveStringsW
FindFirstVolumeW
FindNextVolumeW
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
SetEvent
CreateEventW
GetExitCodeThread
IsBadStringPtrW
CreateThread
IsBadReadPtr
CreateMutexW
ResetEvent
GetModuleHandleA
GetProcAddress
GetFileAttributesW
GetVersion
LoadLibraryW
GetModuleFileNameW
CreateFileW
FindVolumeClose
FreeLibrary
LocalFree
LocalAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCommandLineA
WaitForSingleObject
GetComputerNameW
ReleaseMutex
DeviceIoControl
CreateFileA
GetProcessHeap
ReleaseSemaphore
VirtualProtect
IsBadWritePtr
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
RtlUnwind
GetVersionExA
InterlockedExchange
VirtualQuery
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
WriteFile
IsBadCodePtr
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LoadLibraryA
HeapSize
LCMapStringA
GetLocaleInfoA
advapi32
GetSecurityDescriptorLength
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
GetUserNameW
MakeSelfRelativeSD
GetSecurityDescriptorControl
ole32
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoUnmarshalInterface
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ