nnzmw
Static task
static1
Behavioral task
behavioral1
Sample
7cc1a2c31617964dc11949b6b3e3186e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7cc1a2c31617964dc11949b6b3e3186e.dll
Resource
win10v2004-20231222-en
General
-
Target
7cc1a2c31617964dc11949b6b3e3186e
-
Size
75KB
-
MD5
7cc1a2c31617964dc11949b6b3e3186e
-
SHA1
4aba62e5523bf7f19eb6c18da9dd2280ae176839
-
SHA256
5e4c3f018d8f1e2cbc4bdd21736dcbb6b8479f8af5ccf3d7cff4e4a01d65a162
-
SHA512
8da6b06fe2e20696b3878c7b5effcad5a4d6f2612a16fcebb371bb14fad4fedeaf9e2cf756009509bf52d28a310593a8c853bd3ce06180aa075d609380840f76
-
SSDEEP
1536:I91UDg4K0N07sDxAuN6sNfXJ5rA4Rm4V6nowEWVs1KR/FfK1o:IXURKc070AW6qfJ5rA4RmvowEWVlpFfK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cc1a2c31617964dc11949b6b3e3186e
Files
-
7cc1a2c31617964dc11949b6b3e3186e.dll windows:4 windows x86 arch:x86
69cbfb43083cfd409162f4060d54f541
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LCMapStringW
IsBadWritePtr
TerminateProcess
VirtualQuery
GetFileType
CreateTimerQueueTimer
ReleaseMutex
GetACP
DisconnectNamedPipe
WriteFile
ConnectNamedPipe
GetModuleHandleA
IsBadCodePtr
GetSystemInfo
FreeEnvironmentStringsW
InterlockedExchangeAdd
InitializeCriticalSection
InterlockedDecrement
VirtualProtect
SetEvent
HeapAlloc
GetCPInfo
GetLocaleInfoA
GetCurrentProcessId
WaitForSingleObject
IsBadReadPtr
SetUnhandledExceptionFilter
GetStdHandle
InterlockedExchange
GetModuleFileNameA
GetCurrentThreadId
WideCharToMultiByte
DuplicateHandle
GetVersionExA
LoadLibraryA
CreateEventA
GetTickCount
GetLastError
ResetEvent
CreateNamedPipeA
UnmapViewOfFile
LeaveCriticalSection
GetSystemTimeAsFileTime
DeleteCriticalSection
CreateMutexW
GetOEMCP
HeapDestroy
LCMapStringA
CreateThread
GetEnvironmentStrings
GetEnvironmentStringsW
DeleteTimerQueueTimer
OpenProcess
RtlUnwind
SetLastError
WaitForMultipleObjects
HeapFree
InterlockedCompareExchange
UnhandledExceptionFilter
QueryPerformanceCounter
GetStartupInfoA
MultiByteToWideChar
lstrcpyW
FreeEnvironmentStringsA
ExitThread
GetBinaryTypeA
lstrcatW
Sleep
EnterCriticalSection
user32
wsprintfW
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
msvcrt
memset
Exports
Exports
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ