Static task
static1
Behavioral task
behavioral1
Sample
12b2d7179c36dfc9ab0beae41377e477.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
12b2d7179c36dfc9ab0beae41377e477.dll
Resource
win10v2004-20231222-en
General
-
Target
12b2d7179c36dfc9ab0beae41377e477
-
Size
64KB
-
MD5
12b2d7179c36dfc9ab0beae41377e477
-
SHA1
9391ad55752c8d7580521da6c83554dba798b228
-
SHA256
5000c34bab1b4f9e1d12a951abed0023be903440842224211afc5893279a7131
-
SHA512
ab156a3bdb80f83bb5cb61fd5af8310384e76d3cd87c9620d1d7dd929f9f8071aa42cf16970f4cf8669b8db0b9ab2329df5c3e911a1bfe97c04a231607b9ad77
-
SSDEEP
1536:0bqxW4XFYs77QO3/3lxJ/AcjMdsUBXvJqJwhCwwQjL:0bL4Xf3/vicjMdsmhqJw0ww8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12b2d7179c36dfc9ab0beae41377e477
Files
-
12b2d7179c36dfc9ab0beae41377e477.dll windows:6 windows x86 arch:x86
982bd4d46d5a2d3d5e67fe63488f0405
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
VirtualProtect
ExitThread
GetModuleHandleA
LoadLibraryA
CloseHandle
CreateThread
GetProcAddress
GetModuleHandleW
SetLastError
GetLastError
AreFileApisANSI
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindClose
CreateFileW
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
msvcp140
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
_Cnd_signal
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Throw_Cpp_error@std@@YAXH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
_Mtx_unlock
_Cnd_init
_Mtx_destroy
_Xtime_get_ticks
_Thrd_detach
_Thrd_start
_Mtx_init
_Cnd_wait
_Thrd_sleep
_Cnd_destroy
_Cnd_do_broadcast_at_thread_exit
_Mtx_lock
?_Syserror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Throw_C_error@std@@YAXH@Z
?_Winerror_map@std@@YAHH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_message@std@@YAKKPADK@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
vcruntime140
_except_handler4_common
_CxxThrowException
memset
__std_type_info_destroy_list
__std_exception_copy
__std_exception_destroy
__std_terminate
__CxxFrameHandler3
memcpy
memchr
memmove
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_initialize_narrow_environment
_register_onexit_function
_seh_filter_dll
_execute_onexit_table
_crt_atexit
_invalid_parameter_noinfo_noreturn
terminate
_cexit
_initterm
_initterm_e
_configure_narrow_argv
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ