Decode_Messages_Qualcomm
Static task
static1
Behavioral task
behavioral1
Sample
94d1aa646a00a59b67092180111b88f2c2c6795f88d04c623ad5de32745cf842.dll
Resource
win7-20231129-en
General
-
Target
94d1aa646a00a59b67092180111b88f2c2c6795f88d04c623ad5de32745cf842
-
Size
1.8MB
-
MD5
468335cd639e7d68a107e221107ef100
-
SHA1
f86f446e6f06437f0408a0f0d40eddf11539661a
-
SHA256
94d1aa646a00a59b67092180111b88f2c2c6795f88d04c623ad5de32745cf842
-
SHA512
abc3dd904a5e9fa910826ec17ba23760c844a958c4106647f864c9e45cdfc8272b37e02bc8aa67f013d5090316c29700670840d2f51dfdb07a3ef2b3b81f7763
-
SSDEEP
49152:hZxMZzfVWRIEmDfRAVvi+mA/mlLTRx4tiGvFfJpjyuiV6MusRMRnO1m5N1+otydG:hZxMvWROV6MubnydYstFixz6f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 94d1aa646a00a59b67092180111b88f2c2c6795f88d04c623ad5de32745cf842
Files
-
94d1aa646a00a59b67092180111b88f2c2c6795f88d04c623ad5de32745cf842.dll windows:6 windows x86 arch:x86
9a8637ff1a508ff753e44f01fed10328
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
GetProcAddress
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
EncodePointer
DecodePointer
WideCharToMultiByte
GetStringTypeW
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
RaiseException
RtlUnwind
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
WriteFile
ExitProcess
HeapSize
IsDebuggerPresent
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
SetLastError
IsValidCodePage
GetACP
GetOEMCP
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
InitOnceExecuteOnce
GetStartupInfoW
SetFilePointerEx
GetProcessHeap
GetTimeZoneInformation
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
CompareStringEx
LCMapStringEx
SetStdHandle
CreateFileW
SetEnvironmentVariableA
Exports
Exports
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ