Static task
static1
Behavioral task
behavioral1
Sample
0dcaf08b7b1f8de3999af567144b13f36bea3a68f46f81f8443a81a50a86a09c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0dcaf08b7b1f8de3999af567144b13f36bea3a68f46f81f8443a81a50a86a09c.dll
Resource
win10v2004-20240226-en
General
-
Target
0dcaf08b7b1f8de3999af567144b13f36bea3a68f46f81f8443a81a50a86a09c
-
Size
1.5MB
-
MD5
c4c5a8166fda786f7af516e36c5cc859
-
SHA1
066fa14e24c85eb3b3698c93307f2f960b2c179c
-
SHA256
0dcaf08b7b1f8de3999af567144b13f36bea3a68f46f81f8443a81a50a86a09c
-
SHA512
68cfca85f2b8e8fdfb8fcff39dcdca1ecd041075a664fe2cf81c0d1d69a41531b7f6142e34f5f08b93136c6fe12dc802a92088e520ad15a7c658db03ab468074
-
SSDEEP
24576:ZjaOJUWePrglEnyJS50TiHTraohj9UW3KB1r2BvyelrZp:VaOJMzUXTTB1r2Yelz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dcaf08b7b1f8de3999af567144b13f36bea3a68f46f81f8443a81a50a86a09c
Files
-
0dcaf08b7b1f8de3999af567144b13f36bea3a68f46f81f8443a81a50a86a09c.dll windows:6 windows x86 arch:x86
e215c7e3179e389af220426ac13d9b87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
GetModuleHandleA
GetProcAddress
LocalAlloc
LocalFree
CloseHandle
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
GetModuleHandleExW
HeapValidate
GetSystemInfo
ExitProcess
GetStdHandle
GetFileType
WriteFile
OutputDebugStringW
WriteConsoleW
SetConsoleCtrlHandler
GetCurrentThread
HeapReAlloc
HeapSize
HeapQueryInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
FlushFileBuffers
DecodePointer
ReadFile
ReadConsoleW
CreateFileW
Sections
.text Size: 722KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 596KB - Virtual size: 601KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 265B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ