TestN612jjjjjjj
Static task
static1
Behavioral task
behavioral1
Sample
9b0a4b66456ab0811ca41dfd1a58484f.dll
Resource
win7-20231215-en
General
-
Target
9b0a4b66456ab0811ca41dfd1a58484f
-
Size
275KB
-
MD5
9b0a4b66456ab0811ca41dfd1a58484f
-
SHA1
08a1a07dd30c5d6954dfa4e75ef133449f855cd0
-
SHA256
335d5d8ec7dc191d2ac973e34c65d33381ff3a11da2bd99e7ae8f7f3636ada46
-
SHA512
b9aae92d4338029d0586af0bfe09170779a5168549f6ce66e367423a08ca790641af904be426a2b4a77098a4e31c509fdd29cf25a2d4d15e917afe3f7a7fcd68
-
SSDEEP
6144:NyPfYWVk+AQOwHUjj7bzrQ8Xu4MSLH3xvH/oC:NyPF+sOwaHbzrQmRLH3ZHg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9b0a4b66456ab0811ca41dfd1a58484f
Files
-
9b0a4b66456ab0811ca41dfd1a58484f.dll windows:5 windows x86 arch:x86
d48a3c0bea3c0fa80a2948dd59606aad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAlloc
GetModuleHandleA
lstrcmpA
LoadLibraryA
GetCurrencyFormatW
GetBinaryTypeW
GetStringTypeExW
FormatMessageW
GetModuleHandleW
LCMapStringW
GetStdHandle
FindClose
GetCommandLineW
ExitProcess
CloseHandle
SetEvent
TerminateProcess
ResetEvent
GetCommandLineA
GetVersion
GetProcAddress
RtlUnwind
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapAlloc
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
IsBadWritePtr
RaiseException
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
Sleep
LCMapStringA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Exports
Exports
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 167KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ