Static task
static1
Behavioral task
behavioral1
Sample
eb2967d211acd4b21d0c7de43e8821cd02a4c9c9f0ddd13627c5eb3a2fef1c6f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
eb2967d211acd4b21d0c7de43e8821cd02a4c9c9f0ddd13627c5eb3a2fef1c6f.dll
Resource
win10v2004-20231215-en
General
-
Target
eb2967d211acd4b21d0c7de43e8821cd02a4c9c9f0ddd13627c5eb3a2fef1c6f
-
Size
311KB
-
MD5
29fc43ee347ed5e882036bfd9f0c0ee8
-
SHA1
b1e2c4e727ee47f259540adb1877ec4f2ed116d4
-
SHA256
eb2967d211acd4b21d0c7de43e8821cd02a4c9c9f0ddd13627c5eb3a2fef1c6f
-
SHA512
56f17edc3cbbcb2b315ceb1c451d29f6375b2124a7db7d3071d85e667c70e3cb526959a41c8afc1e76a0bac9dbc0eff2d7ef73e55ae3315d085c2f7af4c22208
-
SSDEEP
6144:pcMKGwmceramTbpmvyKGekzS041XIu5dsoDh:p+mL3p3KGekg5io
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb2967d211acd4b21d0c7de43e8821cd02a4c9c9f0ddd13627c5eb3a2fef1c6f
Files
-
eb2967d211acd4b21d0c7de43e8821cd02a4c9c9f0ddd13627c5eb3a2fef1c6f.dll windows:5 windows x86 arch:x86
652732858e9faaee6cbdc56fc6547ca9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcr100
_malloc_crt
_cexit
??_U@YAPAXI@Z
malloc
?__ExceptionPtrCopy@@YAXPAXPBX@Z
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_crt_debugger_hook
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
??2@YAPAXI@Z
??3@YAXPAX@Z
_msize
__FrameUnwindFilter
kernel32
HeapFree
HeapAlloc
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
HeapSetInformation
IsDebuggerPresent
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ippi-7.0
ippiFilterLowpass_8u_C1R
ippiFilterLowpass_8u_C3R
ippiFilterLowpass_16s_C1R
gdi32
CreateDIBSection
CreateCompatibleDC
SelectObject
SetStretchBltMode
SetDIBitsToDevice
DeleteObject
mscoree
_CorDllMain
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ