Static task
static1
Behavioral task
behavioral1
Sample
51b42279c3f367daa1babfe85ca87cc8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51b42279c3f367daa1babfe85ca87cc8.dll
Resource
win10v2004-20231222-en
General
-
Target
51b42279c3f367daa1babfe85ca87cc8
-
Size
176KB
-
MD5
51b42279c3f367daa1babfe85ca87cc8
-
SHA1
403e22b76389b63774d943213e7fdf7952a5dbfc
-
SHA256
086c834a72997f7d26c8abb9151a02d7dd6e8ffa841b3e2353770bff13df25bb
-
SHA512
c318e40fdf5e517fb0ae278b46ff04abf04cceab8aaa7d8eeca2575b7110e2dc849d58a6215d67b4d7307087a95640634ab59234a4231e3427aea8b6ef376e29
-
SSDEEP
3072:/E8dEZsUI0FM0qsrhG8Dug1Y6tSNmxLitqP8lRlXMqqDLy/y+QwzHuGvM7DtMD:b6e0JtCTeLheIqqDLuy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51b42279c3f367daa1babfe85ca87cc8
Files
-
51b42279c3f367daa1babfe85ca87cc8.dll windows:4 windows x86 arch:x86
1d212a026bc4364a0d9d7429ea4bc25b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemTimeAsFileTime
GetLocaleInfoA
GetCurrentThreadId
RaiseException
InterlockedIncrement
lstrcpyW
lstrlenW
lstrcpynW
lstrcmpiW
GetTickCount
GetCommandLineA
GetCurrentProcessId
VirtualProtect
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
RtlUnwind
GetVersionExA
InterlockedExchange
VirtualQuery
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LoadLibraryA
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetSystemInfo
user32
UnionRect
SetRect
SetRectEmpty
advapi32
RegDeleteValueW
RegEnumValueW
RegQueryInfoKeyW
RegEnumKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyW
ole32
CoTaskMemAlloc
CoTaskMemFree
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ