Static task
static1
Behavioral task
behavioral1
Sample
c6535119872b7226d7f98886be7da055.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c6535119872b7226d7f98886be7da055.dll
Resource
win10v2004-20231215-en
General
-
Target
c6535119872b7226d7f98886be7da055.exe
-
Size
117KB
-
MD5
c6535119872b7226d7f98886be7da055
-
SHA1
7ce67875a160f2e7d56087d9eaba6505a3de822e
-
SHA256
4f53975d3d928a6a5f9abe635254b48f42ac119637f10d5237279288feb66c6f
-
SHA512
8904dde7de36e16d4f915666206828bc8d9cdb9da87496f2ec0c0ab58193889f16d402423aa0de1570cd9bbd5c3dcfd972ffbe3b5d9cf65685945a4a45800d2a
-
SSDEEP
3072:+o/PD3T4jP8YHKJduW/Q+vVQb6gQHWJDER6hdO:+o/rU/HqduW/b7iLhdO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6535119872b7226d7f98886be7da055.exe
Files
-
c6535119872b7226d7f98886be7da055.exe.dll windows:6 windows x86 arch:x86
3b9d9bc304736ac402ef3379a25a92b7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcess
GetProcAddress
GetModuleHandleW
VirtualAlloc
GetTickCount
Sleep
VirtualQuery
GetCommandLineA
CreateProcessA
VirtualAllocEx
WriteProcessMemory
ResumeThread
GetCurrentThread
CreateThread
HeapFree
InitializeCriticalSectionEx
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
CreateFileW
SetFilePointerEx
CloseHandle
WriteFile
GetLastError
ExitProcess
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
SuspendThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualFree
VirtualProtect
SetLastError
FreeLibrary
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
GetModuleFileNameW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
WriteConsoleW
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ