GetProcessorModuleInterface
Static task
static1
Behavioral task
behavioral1
Sample
fe410c64bf42d96a22785c49f490ececae4d1f2dc66482ca1a7310abe6b30627.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fe410c64bf42d96a22785c49f490ececae4d1f2dc66482ca1a7310abe6b30627.dll
Resource
win10v2004-20231215-en
General
-
Target
fe410c64bf42d96a22785c49f490ececae4d1f2dc66482ca1a7310abe6b30627
-
Size
76KB
-
MD5
8c628a5235890cdb17fef79f3fab3b5e
-
SHA1
624c6e35d2debfacdeff739adf7f40d29cebb241
-
SHA256
fe410c64bf42d96a22785c49f490ececae4d1f2dc66482ca1a7310abe6b30627
-
SHA512
ea81a874331095b36d1a280ef70e7fe690e83c0362e63aa25af0ee4df4ae49dd1fc183aaa833285fa1f7bb0f0e75cc02ecc23206e460e9004813439744923607
-
SSDEEP
768:Elp0OSIq5s5A6B4QyITn0kXHU2Ap0DHQiB91ySlfkmiL47pDBciuRe7:Elp9xNyITnSpCuUMvL+DBciWk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe410c64bf42d96a22785c49f490ececae4d1f2dc66482ca1a7310abe6b30627
Files
-
fe410c64bf42d96a22785c49f490ececae4d1f2dc66482ca1a7310abe6b30627.dll windows:4 windows x86 arch:x86
b84802231b3db83fcfba3c04dea6ae31
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadResource
SizeofResource
FindResourceA
LoadLibraryExA
CloseHandle
CreateFileA
GetModuleFileNameA
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
HeapAlloc
GetCommandLineA
GetVersion
RtlUnwind
RaiseException
HeapFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
GetACP
GetOEMCP
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LockResource
IsBadWritePtr
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
LCMapStringA
LCMapStringW
HeapSize
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
GetProcAddress
SearchPathA
HeapReAlloc
FreeLibrary
user32
LoadStringA
advapi32
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextA
ole32
CoTaskMemFree
CoTaskMemAlloc
oleaut32
VariantClear
SysFreeString
SysStringLen
SysAllocString
imagehlp
ImageGetDigestStream
Exports
Exports
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ