PloaesRvommnr
Static task
static1
Behavioral task
behavioral1
Sample
a2974892d02eca38191cfa6768706cc9.dll
Resource
win7-20240221-en
General
-
Target
a2974892d02eca38191cfa6768706cc9
-
Size
184KB
-
MD5
a2974892d02eca38191cfa6768706cc9
-
SHA1
ea462831aa85d411aa117805ddeb20c42cd37fef
-
SHA256
e1c248b440f53f52533c4f2c32afef336413d4a828b556bf4bc0b3cd3e0b8332
-
SHA512
6073535e9e820c194e8a45040215c1ebee6884b7af21fa65675e1720021b74b73e1959acf469e38c4ba8baa92f91a676cc394187faf780d6ebe5c71040443788
-
SSDEEP
3072:+a3FHV3GsUEK4BRSjhvn0WUqqgfkNzQHAVCKdfzl5hL+yz:+8dt3+0TqqgqNcef1L+y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2974892d02eca38191cfa6768706cc9
Files
-
a2974892d02eca38191cfa6768706cc9.dll windows:5 windows x86 arch:x86
cad673980682609436f019e51b6d0592
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
memset
iswlower
winmm
waveOutGetNumDevs
crypt32
CryptSIPCreateIndirectData
esent
JetEndSession
shlwapi
ChrCmpIW
StrCmpNW
rpcrt4
RpcBindingSetAuthInfoExW
gdi32
StretchBlt
kernel32
LoadLibraryExA
GetModuleFileNameW
VirtualProtect
EndUpdateResourceA
GetModuleHandleW
SetDefaultCommConfigW
GetTempPathA
TransactNamedPipe
WriteFile
DebugBreak
oleaut32
VarUdateFromDate
BSTR_UserFree
rasapi32
RasDeleteEntryW
mprapi
MprAdminGetErrorString
user32
ImpersonateDdeClientWindow
ShowOwnedPopups
advapi32
CreateServiceW
RegLoadAppKeyA
FreeSid
setupapi
SetupLogErrorW
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ