DLL_Initialize
Static task
static1
Behavioral task
behavioral1
Sample
96405d4aaba01486de89241c4baace73.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
96405d4aaba01486de89241c4baace73.dll
Resource
win10v2004-20231215-en
General
-
Target
96405d4aaba01486de89241c4baace73
-
Size
128KB
-
MD5
96405d4aaba01486de89241c4baace73
-
SHA1
e8e3ac99eb2ed2871ee9cef501ee5dc125ecb32b
-
SHA256
0a7d58404baed84a78e01eae921a37f3ce7cf0e449408cc0c129b87f7a0e6142
-
SHA512
514f57d59a53170db17b1f3338a7b8fbdac582e62b087eff1cbfeb0d7b4c74159a1ceaebb1bdfb4c45b62f56643ce5c988bd04570a015f00ec4c9f3afb7821de
-
SSDEEP
3072:gQoUwRlom7OXGq5EkScXySbOuoQdiZhpSJz3f5sTM4hyzz:7wROyOXGL/chOQdiZh0+Mmyzz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96405d4aaba01486de89241c4baace73
Files
-
96405d4aaba01486de89241c4baace73.dll windows:4 windows x86 arch:x86
0db94483d298d1e0be7d95d30ae1d4b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
strncpy
_adjust_fdiv
_initterm
_endthreadex
_beginthreadex
strerror
_setmode
_control87
raise
signal
_stati64
_get_osfhandle
_fstati64
_lseeki64
_errno
_iob
__mb_cur_max
_isctype
_pctype
calloc
free
realloc
malloc
sprintf
_strdup
_open
_read
_write
_close
kernel32
ReleaseSemaphore
LeaveCriticalSection
CreateSemaphoreA
DisableThreadLibraryCalls
GetThreadTimes
TlsGetValue
SetThreadPriority
GetThreadPriority
ResumeThread
SuspendThread
GetThreadContext
VirtualQuery
TlsAlloc
GetVersionExA
GetCurrentProcess
GetCurrentThreadId
GetCurrentThread
DuplicateHandle
TlsSetValue
FormatMessageA
Sleep
SystemTimeToFileTime
GetSystemTime
GetTickCount
CreateEventA
SetFilePointer
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
GetSystemInfo
VirtualAlloc
VirtualFree
InitializeCriticalSection
CloseHandle
WaitForSingleObject
SetEndOfFile
SetHandleInformation
EnterCriticalSection
PeekNamedPipe
SetEvent
ResetEvent
IsDBCSLeadByte
GetStdHandle
PeekConsoleInputA
GetNumberOfConsoleInputEvents
FlushFileBuffers
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ