Static task
static1
Behavioral task
behavioral1
Sample
bdcf711ce9161f3da502b54080a4dfab.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdcf711ce9161f3da502b54080a4dfab.dll
Resource
win10v2004-20240226-en
General
-
Target
bdcf711ce9161f3da502b54080a4dfab
-
Size
94KB
-
MD5
bdcf711ce9161f3da502b54080a4dfab
-
SHA1
5a1c5623cfcee321a060a17e138a609d113bb9ed
-
SHA256
9dd6b4010509b0e56c05771bbb19f07406d12d237950c96fcd30aa9cc94c1306
-
SHA512
b80f0454d22b12585a0a791e48ca40f10df9fb6f9f77d2146747367462a5cc094e85acac9fb8c654eb18c8a3c53b0fec37cae4d906d5543b9497256360142f04
-
SSDEEP
1536:t/2JOqYopwyAGq5r95vTIO8s9Cu8Exao:tuJYopZBd9TExao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdcf711ce9161f3da502b54080a4dfab
Files
-
bdcf711ce9161f3da502b54080a4dfab.dll windows:4 windows x86 arch:x86
2b25ecdf63f10b0f05c2ab5e02213656
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
MoveFileA
DeleteFileA
LoadLibraryW
GetProcAddress
GetModuleHandleA
lstrcpynA
GetLastError
GetSystemDefaultLangID
CloseHandle
TerminateProcess
LoadLibraryA
GlobalFree
GlobalAlloc
GetVersionExA
GetTickCount
GlobalMemoryStatus
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
CreateThread
lstrcpyA
MoveFileExA
GetCurrentProcess
ExitProcess
SetEndOfFile
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ReadFile
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
WriteFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
CreateFileA
GetStringTypeA
GetStringTypeW
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
shell32
DoEnvironmentSubstA
shlwapi
PathFileExistsA
iphlpapi
GetAdaptersInfo
ws2_32
inet_ntoa
inet_addr
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ