Module_Entry
Static task
static1
Behavioral task
behavioral1
Sample
1a73cfd57656e3e0af6a27f2a01c883c8289e690a8fe7a42eadd8be7dd42355d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a73cfd57656e3e0af6a27f2a01c883c8289e690a8fe7a42eadd8be7dd42355d.dll
Resource
win10v2004-20231222-en
General
-
Target
1a73cfd57656e3e0af6a27f2a01c883c8289e690a8fe7a42eadd8be7dd42355d
-
Size
125KB
-
MD5
b6759f9d377819374786a9f248c7978a
-
SHA1
629dc79e749914a9ac5db32386cb94f8ce9c5a95
-
SHA256
1a73cfd57656e3e0af6a27f2a01c883c8289e690a8fe7a42eadd8be7dd42355d
-
SHA512
5f45780468b692a64a667b53dab227c4af64487faff8ac5f3e8fa11ecb662e091e130dbf84234fbfe1ee7b65ce4135a74c8eaf7aafa32ba44985f73a74693ce4
-
SSDEEP
3072:izvK43anm0sVFb/NbxmNctjEIUpzsR6NfXVySg:W0mrv/NSIUpHg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a73cfd57656e3e0af6a27f2a01c883c8289e690a8fe7a42eadd8be7dd42355d
Files
-
1a73cfd57656e3e0af6a27f2a01c883c8289e690a8fe7a42eadd8be7dd42355d.dll windows:5 windows x86 arch:x86
c7bf92045a26efb8b9e5a67361483a29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
MoveFileA
GetLocalTime
CreateThread
SuspendThread
GetTempFileNameA
Sleep
TerminateThread
CloseHandle
ResumeThread
DecodePointer
SetEndOfFile
GetTimeZoneInformation
HeapReAlloc
HeapSize
FlushFileBuffers
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
EncodePointer
RtlUnwind
RaiseException
GetLastError
GetModuleFileNameW
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReadFile
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
HeapFree
HeapAlloc
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetACP
WriteFile
GetConsoleCP
CompareStringW
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryW
SetStdHandle
GetStringTypeW
GetTempPathA
user32
GetDlgItem
EndDialog
SetWindowTextA
wsprintfA
DialogBoxParamA
MessageBoxA
shell32
SHGetFolderPathA
shlwapi
PathStripPathA
advapi32
SystemFunction036
Exports
Exports
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ