Static task
static1
Behavioral task
behavioral1
Sample
gd22unlockall.dll
Resource
win11-20231215-en
General
-
Target
gd22unlockall.dll
-
Size
25KB
-
MD5
a1acb3d9b5112e6ab9fefbcf64e14d90
-
SHA1
7c8c23d825dc22963fcaff6713db4339921ec484
-
SHA256
40e7035fd4cf92d354b32530988cfe8766749dfaf58deb10bbd1f5ccfd3e41df
-
SHA512
0b01f0c98676b4cf57c26a1313575c5db76dd9a4843e59a02412951911bf84ace6a1a1aac31d154412f5e51bd3604a974c4db0e3c27595bd28b1b06f81b17813
-
SSDEEP
384:MKM6MAdwG2utcSvPjc9CUSwHzrcrkQvgdjj0Otzl5jW:eTMtT4CpCbtzl5j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource gd22unlockall.dll
Files
-
gd22unlockall.dll.dll windows:6 windows x86 arch:x86
4bb2b5d6d8a5d5163f5dff6c3a9eaafd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
libcocos2d
??0CCSize@cocos2d@@QAE@MM@Z
??0CCRect@cocos2d@@QAE@MMMM@Z
??0CCPoint@cocos2d@@QAE@MM@Z
kernel32
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
GetModuleHandleA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
WriteProcessMemory
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
msvcp140
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Xtime_get_ticks
?_Xlength_error@std@@YAXPBD@Z
vcruntime140
_CxxThrowException
__CxxFrameHandler3
memmove
memset
_except_handler4_common
__std_type_info_destroy_list
__std_exception_copy
__std_exception_destroy
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_crt_atexit
_cexit
_initterm_e
_seh_filter_dll
_initialize_narrow_environment
_execute_onexit_table
_initterm
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
api-ms-win-crt-time-l1-1-0
_time64
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ