RegisterModule
Static task
static1
Behavioral task
behavioral1
Sample
5fe6108425589c65f0fd93742e3c0b7055138b000ecfc57a67e226072a74c4b5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5fe6108425589c65f0fd93742e3c0b7055138b000ecfc57a67e226072a74c4b5.dll
Resource
win10v2004-20231222-en
General
-
Target
5fe6108425589c65f0fd93742e3c0b7055138b000ecfc57a67e226072a74c4b5
-
Size
312KB
-
MD5
76cc9a497ea08b555b6a996c7a1a379d
-
SHA1
91f52c92fce72ec2c0ee0256af84e0acc79d6bba
-
SHA256
5fe6108425589c65f0fd93742e3c0b7055138b000ecfc57a67e226072a74c4b5
-
SHA512
05f084560c99e7834a633cb207b27d91d4d6d72efb06fc355d97ce1685d9cc35bd8ece49198f01f58865c618000938cc9658c86390c86a57c421d196cbc6ad8b
-
SSDEEP
6144:G37CY8eAufTJ/ONIANF1q3aN0dAO6v+K4u:G3RVTJ/ON9FboBu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fe6108425589c65f0fd93742e3c0b7055138b000ecfc57a67e226072a74c4b5
Files
-
5fe6108425589c65f0fd93742e3c0b7055138b000ecfc57a67e226072a74c4b5.dll windows:6 windows x86 arch:x86
2d88990b9b52140ff4048b98f75bb46f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
HttpQueryInfoA
InternetSetOptionA
ws2_32
ntohl
inet_addr
kernel32
GetSystemTimeAsFileTime
WriteConsoleW
CreateFileW
HeapSize
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
DebugBreak
OutputDebugStringA
CloseHandle
CreateThread
CreateFileA
GetFileSize
GetFinalPathNameByHandleA
GetLastError
MapViewOfFile
UnmapViewOfFile
lstrlenW
CreateFileMappingA
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
WaitForSingleObjectEx
GetCurrentThreadId
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
RaiseException
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
CompareStringEx
MultiByteToWideChar
GetCPInfo
WideCharToMultiByte
LCMapStringEx
GetModuleHandleW
GetProcAddress
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwind
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleFileNameW
HeapFree
HeapReAlloc
HeapAlloc
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
user32
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
SetTimer
Exports
Exports
Sections
.text Size: 203KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ