Shangjian
Static task
static1
Behavioral task
behavioral1
Sample
5be0045a2c86c38714ada4084080210ced8bc5b6865aef1cca658b263ff696dc.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5be0045a2c86c38714ada4084080210ced8bc5b6865aef1cca658b263ff696dc.dll
Resource
win10v2004-20240226-en
General
-
Target
5be0045a2c86c38714ada4084080210ced8bc5b6865aef1cca658b263ff696dc
-
Size
313KB
-
MD5
a39a0a38e4defd25edd8ddd540d9dd67
-
SHA1
39f792c68fb5e9493adcb214017dae8b97534ec3
-
SHA256
5be0045a2c86c38714ada4084080210ced8bc5b6865aef1cca658b263ff696dc
-
SHA512
9b6d766aec56a3a039c0a7a33189ffbda70af6068c3b466ed584e6e89e4ff67f525a4ab71b4bcf7287418f232c8c36b15a722c6536270362320f6b9f8839cc6f
-
SSDEEP
6144:xDLvQTvhseE45KwF2E5ppqIeGN3prXWYm0w:1vUvh3F2E5Gq39m75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5be0045a2c86c38714ada4084080210ced8bc5b6865aef1cca658b263ff696dc
Files
-
5be0045a2c86c38714ada4084080210ced8bc5b6865aef1cca658b263ff696dc.dll windows:6 windows x86 arch:x86
880f1a72f07e280c9f06878b40c4b2b0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
GetModuleFileNameA
SizeofResource
HeapFree
WriteFile
InitializeCriticalSectionEx
HeapSize
GetLastError
LockResource
HeapReAlloc
CloseHandle
RaiseException
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
WideCharToMultiByte
VirtualProtect
SetLastError
VirtualFree
VirtualAlloc
LoadLibraryA
GetNativeSystemInfo
GetProcAddress
FreeLibrary
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
FlushFileBuffers
RtlUnwind
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
HeapValidate
GetSystemInfo
GetModuleFileNameW
GetModuleHandleExW
GetStdHandle
GetFileType
MultiByteToWideChar
HeapQueryInformation
WriteConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetStringTypeW
SetFilePointerEx
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
CreateFileW
Exports
Exports
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ