CqewxtdaAwerflsou
Static task
static1
Behavioral task
behavioral1
Sample
c863e1e537b7acde88d8d831b9f1a265c8eff4ebd9f62438e8a2fa57e3337610.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c863e1e537b7acde88d8d831b9f1a265c8eff4ebd9f62438e8a2fa57e3337610.dll
Resource
win10v2004-20240226-en
General
-
Target
c863e1e537b7acde88d8d831b9f1a265c8eff4ebd9f62438e8a2fa57e3337610
-
Size
1.7MB
-
MD5
c7e85b3ae4dacfffb0b421242dafc0e6
-
SHA1
aacdcc0cb01f091d59a49aea3a426f48ad97df61
-
SHA256
c863e1e537b7acde88d8d831b9f1a265c8eff4ebd9f62438e8a2fa57e3337610
-
SHA512
daf94cdbeb266573199e9e60b5912048e3d75414211da6c6efcdc3a5d8ebf8dca5f388d4bdf11afffd56fb9e96f68774e1e45df0a771867d27a551309a5d9744
-
SSDEEP
49152:5mPEFMpQI181cvgr7ASbfMxvncwsQaE/HoX:5vFMpQI181YQbkxncU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c863e1e537b7acde88d8d831b9f1a265c8eff4ebd9f62438e8a2fa57e3337610
Files
-
c863e1e537b7acde88d8d831b9f1a265c8eff4ebd9f62438e8a2fa57e3337610.dll windows:5 windows x86 arch:x86
715aaf8f9e49a79179361d8dfed6d335
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
GetOldestEventLogRecord
urlmon
ReleaseBindInfo
oleaut32
GetErrorInfo
setupapi
SetupDiDestroyDeviceInfoList
user32
SetMenu
IsWindowEnabled
MapWindowPoints
SetRectEmpty
gdi32
SetPixelV
Ellipse
FillPath
GetNearestPaletteIndex
PaintRgn
DPtoLP
PolyPolyline
msvfw32
DrawDibGetPalette
kernel32
LoadLibraryExW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
GetUserDefaultUILanguage
SetStdHandle
GetBinaryTypeW
GetModuleFileNameW
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 276KB - Virtual size: 273KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ffor Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
=2i Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4g Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ