Static task
static1
Behavioral task
behavioral1
Sample
ae6431a69ae999ebdf4605d6c73156d7457d19c3a29b577f8358127192b41658.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ae6431a69ae999ebdf4605d6c73156d7457d19c3a29b577f8358127192b41658.dll
Resource
win10v2004-20240226-en
General
-
Target
ae6431a69ae999ebdf4605d6c73156d7457d19c3a29b577f8358127192b41658
-
Size
12KB
-
MD5
6fe9faa29f1b70798bda325cb222b338
-
SHA1
18d50bb6fa7e054c274853c15baacba8faacf3bb
-
SHA256
ae6431a69ae999ebdf4605d6c73156d7457d19c3a29b577f8358127192b41658
-
SHA512
33118bf1ee20051662373589def771eabccf97598fd20813b0c898d7117b25e7dde309e61c81d803932bbebd383ba10ffbc17a81be813bafe2600e7ae4bb6616
-
SSDEEP
192:xUuL+C5tuoTlwonkS9nYaxaW1CBlRC6M8h0vDaE+5klXCnj0S7LYhSAEtwO5N0Mx:uuL9tT5BkS9n7ae6M8h0z7Oj0g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae6431a69ae999ebdf4605d6c73156d7457d19c3a29b577f8358127192b41658
Files
-
ae6431a69ae999ebdf4605d6c73156d7457d19c3a29b577f8358127192b41658.dll windows:4 windows x86 arch:x86
32e3fb691f0a12b1f1c5eb6512f0df0e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
osg
??1Group@osg@@MAE@XZ
?notify@osg@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@W4NotifySeverity@1@@Z
??0Group@osg@@QAE@XZ
?getNumChildren@Group@osg@@QBEIXZ
?cloneType@Group@osg@@UBEPAVObject@2@XZ
?unref@Referenced@osg@@QBEXXZ
?clone@Group@osg@@UBEPAVObject@2@ABVCopyOp@2@@Z
?isSameKindAs@Group@osg@@UBE_NPBVObject@2@@Z
?libraryName@Group@osg@@UBEPBDXZ
?className@Group@osg@@UBEPBDXZ
?asGroup@Group@osg@@UBEPBV12@XZ
?asGroup@Group@osg@@UAEPAV12@XZ
?asTransform@Node@osg@@UBEPBVTransform@2@XZ
?asTransform@Node@osg@@UAEPAVTransform@2@XZ
?accept@Group@osg@@UAEXAAVNodeVisitor@2@@Z
?ascend@Node@osg@@UAEXAAVNodeVisitor@2@@Z
?traverse@Group@osg@@UAEXAAVNodeVisitor@2@@Z
?computeBound@Group@osg@@MBE_NXZ
?addChild@Group@osg@@UAE_NPAVNode@2@@Z
?removeChild@Group@osg@@UAE_NII@Z
?removeChild@Group@osg@@UAE_NPAVNode@2@@Z
?replaceChild@Group@osg@@UAE_NPAVNode@2@0@Z
?setChild@Group@osg@@UAE_NIPAVNode@2@@Z
??1Referenced@osg@@MAE@XZ
osgdb
?getLowerCaseFileExtension@osgDB@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?getDirectoryContents@osgDB@@YA?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?getFileExtension@osgDB@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
??_7ReaderWriter@osgDB@@6B@
?removeReaderWriter@Registry@osgDB@@QAEXPAVReaderWriter@2@@Z
?instance@Registry@osgDB@@SAPAV12@XZ
?addReaderWriter@Registry@osgDB@@QAEXPAVReaderWriter@2@@Z
?equalCaseInsensitive@osgDB@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z
?readObject@ReaderWriter@osgDB@@UAE?AVReadResult@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@12@@Z
?readImage@ReaderWriter@osgDB@@UAE?AVReadResult@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@12@@Z
?writeObject@ReaderWriter@osgDB@@UAE?AVWriteResult@12@ABVObject@osg@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@12@@Z
?writeImage@ReaderWriter@osgDB@@UAE?AVWriteResult@12@ABVImage@osg@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@12@@Z
?writeNode@ReaderWriter@osgDB@@UAE?AVWriteResult@12@ABVNode@osg@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@12@@Z
?readNodeFile@osgDB@@YAPAVNode@osg@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
msvcp70
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Nomemory@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
msvcr70
__CxxFrameHandler
??3@YAXPAX@Z
system
sprintf
??0exception@@QAE@ABV0@@Z
_CxxThrowException
malloc
_callnewh
??1type_info@@UAE@XZ
__dllonexit
_onexit
free
_initterm
_adjust_fdiv
?terminate@@YAXXZ
??1exception@@UAE@XZ
_mkdir
_except_handler3
??0exception@@QAE@XZ
kernel32
DisableThreadLibraryCalls
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ