Z:\devel\openssl-1.0.1l-win32\out32dll\nuron.pdb
Static task
static1
Behavioral task
behavioral1
Sample
64d98d47e9bb3af42445448bd6d03648161a53a5fd63bd6813c46468316010a5.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
64d98d47e9bb3af42445448bd6d03648161a53a5fd63bd6813c46468316010a5.dll
Resource
win10v2004-20240226-en
General
-
Target
64d98d47e9bb3af42445448bd6d03648161a53a5fd63bd6813c46468316010a5
-
Size
10KB
-
MD5
957e828a558c303699e961f48dc448d6
-
SHA1
e27ce20899e351ffb2f31982a1a44c7dd10890de
-
SHA256
64d98d47e9bb3af42445448bd6d03648161a53a5fd63bd6813c46468316010a5
-
SHA512
5ab22fb938bbadd638bb4a0b328e64ff66153b232231060168aefdbf03e003d857f5e8b8aa283c677a5b6bc44894f786a9cb59382c16b9457c851abb69caa937
-
SSDEEP
192:nfNyRZTE/2jiR9puS2yiP9pc3XK2dqHW:n0XTE/2jiXpT2yYpU62x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64d98d47e9bb3af42445448bd6d03648161a53a5fd63bd6813c46468316010a5
Files
-
64d98d47e9bb3af42445448bd6d03648161a53a5fd63bd6813c46468316010a5.dll windows:5 windows x86 arch:x86
79f9d4febe5ddd4d55ee1b8038c11976
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
libeay32
ord2875
ord2522
ord2494
ord2483
ord2992
ord2473
ord2468
ord2497
ord2505
ord483
ord2848
ord2841
ord2412
ord2416
ord2415
ord195
ord197
ord198
ord3393
ord1885
ord1890
ord1095
ord129
ord145
ord2261
ord2268
ord2409
ord170
ord181
ord252
ord2881
ord966
ord2512
ord247
msvcr90
_except_handler4_common
_crt_debugger_hook
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
_onexit
kernel32
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedExchange
Exports
Exports
bind_engine
v_check
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 722B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ