fewiludvsj.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a0e1d0d66ab0bd6d33da5cac1fc72152.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0e1d0d66ab0bd6d33da5cac1fc72152.dll
Resource
win10v2004-20240221-en
General
-
Target
a0e1d0d66ab0bd6d33da5cac1fc72152
-
Size
594KB
-
MD5
a0e1d0d66ab0bd6d33da5cac1fc72152
-
SHA1
b33eea620698ee893c567b8f8138206a13217fc9
-
SHA256
c427bc4eaf7d760662ef2834ce48bdfc0ca2478d05df2d5bd2b5791be6d61c44
-
SHA512
6b5580a25768f2f1c001975b5794b944b3ac3e3d9a14c99e166db3a70ddc1dd50395884aa08d76f13eb39d303905710e0c4026184d4d604d509b5b519b9b216d
-
SSDEEP
12288:tFF27VdtVYXXGIwZdOY/xej1ZiEixc1ctLuiNLeBk:/F4dtV2Gb/dxeLRl6V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0e1d0d66ab0bd6d33da5cac1fc72152
Files
-
a0e1d0d66ab0bd6d33da5cac1fc72152.dll windows:4 windows x86 arch:x86
59b247baa7d75badd97e4983449e66d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetVersionExA
GetStringTypeW
SetHandleCount
lstrcmpiA
GetCPInfo
UnmapViewOfFile
lstrlenA
SetFilePointer
TerminateProcess
MoveFileW
lstrlenW
GetEnvironmentStringsW
TlsAlloc
CreateThread
GetTickCount
GetSystemTimeAsFileTime
WideCharToMultiByte
HeapReAlloc
LCMapStringA
ReleaseMutex
CloseHandle
DeleteFileA
DeleteFileW
LCMapStringW
InterlockedDecrement
GetLastError
GetCurrentThreadId
MoveFileA
QueryPerformanceCounter
SetEndOfFile
TlsGetValue
FreeLibrary
WaitForSingleObject
LocalAlloc
GetEnvironmentVariableA
CreateEventA
DisableThreadLibraryCalls
GetSystemInfo
FreeEnvironmentStringsW
GetFileSize
LocalFree
GetEnvironmentStrings
GetFullPathNameA
EnterCriticalSection
GetLocaleInfoA
CompareFileTime
OpenFileMappingW
GetStringTypeA
Sleep
CreateMutexW
HeapDestroy
VirtualAlloc
CreateFileA
HeapCreate
OpenFileMappingA
VirtualQuery
HeapFree
InterlockedExchange
SetFileTime
TlsFree
InterlockedIncrement
LeaveCriticalSection
FlushViewOfFile
lstrcmpA
VirtualFree
VirtualProtect
DeleteCriticalSection
GetCurrentProcessId
WriteFile
GetFileType
CreateMutexA
FreeEnvironmentStringsA
GetDiskFreeSpaceW
GetCurrentProcess
GetDiskFreeSpaceA
InitializeCriticalSection
MapViewOfFile
GetFullPathNameW
GetStringTypeExA
CreateFileW
SetEvent
InitializeCriticalSectionAndSpinCount
Exports
Exports
uqiaq
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 528KB - Virtual size: 527KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ