Static task
static1
Behavioral task
behavioral1
Sample
29dc3f6dd7e69ab826e74e0db6c5a190.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
29dc3f6dd7e69ab826e74e0db6c5a190.dll
Resource
win10v2004-20231215-en
General
-
Target
29dc3f6dd7e69ab826e74e0db6c5a190
-
Size
62KB
-
MD5
29dc3f6dd7e69ab826e74e0db6c5a190
-
SHA1
435187f92922419e36628f426a52725053075e83
-
SHA256
ddd835be5f9adbcac729bc2ff6aded0ff79b7700079975c683009cc051196b55
-
SHA512
b293dfa2498db69395d11942c48be09d20958fa586839f76983991e28bf04ba304aeccde5267bd406c6fa44ed7be96285ea5eff93394b0ca48609ccc5eb084b5
-
SSDEEP
768:sqcsJzCHstbxfniNvmYAVFiFrNN58uliZ+0cGoGbmx1GLlKMPoJKMlkjCW/xOHZQ:s0JRni5mtaBJhcYGo4hfP4ejlw/+t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29dc3f6dd7e69ab826e74e0db6c5a190
Files
-
29dc3f6dd7e69ab826e74e0db6c5a190.dll windows:4 windows x86 arch:x86
ceca7d0a6cccd2ca29f493a594f72165
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCommandLineA
GetTickCount
VirtualProtect
GetVersion
ReadFile
CreateMailslotW
CloseHandle
WriteFile
CreateFileW
GetComputerNameW
WriteConsoleW
ExitProcess
HeapFree
HeapAlloc
GetProcessHeap
SetLastError
CompareStringW
lstrlenW
GetStdHandle
FormatMessageW
LocalFree
GetConsoleOutputCP
WideCharToMultiByte
GetThreadLocale
GetLastError
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
TerminateProcess
msvcrt
__CxxFrameHandler
_except_handler3
memset
_iob
_memicmp
_errno
fflush
fprintf
wcstoul
wcstol
wcstok
_initterm
free
malloc
_adjust_fdiv
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ