debug.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ac1a756cb4c031c704d17f497c116598.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac1a756cb4c031c704d17f497c116598.dll
Resource
win10v2004-20240226-en
General
-
Target
ac1a756cb4c031c704d17f497c116598
-
Size
88KB
-
MD5
ac1a756cb4c031c704d17f497c116598
-
SHA1
8590ff7c484e3cbb07dc36bae59fc8188ab0751e
-
SHA256
c75a864489da2b16ee3b6b7fb6d6c90ce3d668f53c6e89ade94b7253f0140f0b
-
SHA512
50d64ff911a86f61c1218f4ad2560e988501881df15a2d85e8eac6c62d875fa49102e21701133d3c542d2631e8f792cb4844e318d516818791a5ba7042799e9d
-
SSDEEP
1536:v+I5Stw6oYKrQmL74Ri0X7WjtpyBR1uABuCE7ToBwfRdvX/g/:vB5cZoYKrl4RieyZsBHuABIoBwrnC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac1a756cb4c031c704d17f497c116598
Files
-
ac1a756cb4c031c704d17f497c116598.dll windows:4 windows x86 arch:x86
65abd7392341657a83019a4aea37278a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
EnumCalendarInfoA
user32
MessageBoxExA
CharPrevA
wsprintfA
MessageBoxA
CharNextA
LoadStringA
advapi32
InitializeSid
RegCloseKey
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
GetSecurityDescriptorDacl
RegEnumValueA
RegQueryValueExA
GetSidSubAuthority
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegOpenKeyExA
GetSidLengthRequired
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Exports
Exports
qknn
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ