Static task
static1
Behavioral task
behavioral1
Sample
2417da3adebd446b9fcb8b896adb14ea495a4d923e3655e5033f78d8e648fcc8.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2417da3adebd446b9fcb8b896adb14ea495a4d923e3655e5033f78d8e648fcc8.dll
Resource
win10v2004-20240226-en
General
-
Target
2417da3adebd446b9fcb8b896adb14ea495a4d923e3655e5033f78d8e648fcc8
-
Size
122KB
-
MD5
ddacd8bc05515fb92abaf2a9ebec76ce
-
SHA1
a4b9a9edcca8f3eb39ecf157c10db7553e932a54
-
SHA256
2417da3adebd446b9fcb8b896adb14ea495a4d923e3655e5033f78d8e648fcc8
-
SHA512
69e3aba5c88b00d80e76ed1377ac4d84a34e4ec267b7d7d2adfefd8dc608fd0d4a541169b9df7df7f86702a76eb715b5a84fdf342bceec994939b1303684bdb6
-
SSDEEP
1536:a2ZkIN7r0BtcqTll7ezV3CvihxTzHndtaaNiXhoMh82HQlOosDc9Dh:a2Zr7em+P0V3thxTzOaghoMNnc9Dh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2417da3adebd446b9fcb8b896adb14ea495a4d923e3655e5033f78d8e648fcc8
Files
-
2417da3adebd446b9fcb8b896adb14ea495a4d923e3655e5033f78d8e648fcc8.dll windows:5 windows x64 arch:x64
74f8ed235bee357efd039be61138d8a4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleW
LoadLibraryW
GetProcAddress
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
CloseHandle
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetLastError
HeapFree
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
SetLastError
FlsAlloc
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
GetLocaleInfoW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetStringTypeW
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetStdHandle
CreateFileW
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ