ServiceCrtMain
Static task
static1
Behavioral task
behavioral1
Sample
40f1d683e554cdd24d50d30c1c4dbe9630ef50ff4313ecc1eb5de94374a4398a.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
40f1d683e554cdd24d50d30c1c4dbe9630ef50ff4313ecc1eb5de94374a4398a.dll
Resource
win10v2004-20240226-en
General
-
Target
40f1d683e554cdd24d50d30c1c4dbe9630ef50ff4313ecc1eb5de94374a4398a
-
Size
53KB
-
MD5
a7d98a8cc5a43c0f01cdf9cd6d9e558b
-
SHA1
2b4de13fea317e15469c230ddb25420441f4d925
-
SHA256
40f1d683e554cdd24d50d30c1c4dbe9630ef50ff4313ecc1eb5de94374a4398a
-
SHA512
ba2d8ac95d69620f08a2f85ed8c6f00ad3f3b4ef14c6bee24686b0ba5e75fdf7b95501488d61bf141b5860da28b2b9a001d2384256d0e657c451f42263d0f0ac
-
SSDEEP
1536:ujt7669r8qrImNqZLGvuM5lxAJHXJPd7b:uxPphIFZKvDxA9n7b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40f1d683e554cdd24d50d30c1c4dbe9630ef50ff4313ecc1eb5de94374a4398a
Files
-
40f1d683e554cdd24d50d30c1c4dbe9630ef50ff4313ecc1eb5de94374a4398a.dll windows:5 windows x86 arch:x86
8dd240698cdc59c6c13d0fb529b04593
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
GetModuleFileNameW
GetSystemDirectoryA
CreateFileW
VirtualProtectEx
VirtualAllocEx
GetProcessHeap
CreateEventW
lstrcatW
VirtualProtect
CloseHandle
WriteProcessMemory
CreateThread
WaitForSingleObject
HeapAlloc
UnmapViewOfFile
MapViewOfFile
GetFileSize
GetThreadContext
CreateFileMappingW
ExitProcess
FlushFileBuffers
IsProcessorFeaturePresent
GetStringTypeW
GetLastError
HeapFree
GetProcAddress
GetModuleHandleW
DecodePointer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
HeapCreate
HeapDestroy
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
HeapSize
RtlUnwind
HeapReAlloc
SetStdHandle
WriteConsoleW
LCMapStringW
advapi32
SetServiceStatus
StartServiceW
ChangeServiceConfig2W
StartServiceCtrlDispatcherW
OpenSCManagerW
CloseServiceHandle
CreateServiceW
RegisterServiceCtrlHandlerW
Exports
Exports
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ