COMResModuleInstance
Static task
static1
Behavioral task
behavioral1
Sample
6860ac794097c39284af178bf81b8ee99b78bf095c15ed645b057127bef7a301.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6860ac794097c39284af178bf81b8ee99b78bf095c15ed645b057127bef7a301.dll
Resource
win10v2004-20240226-en
General
-
Target
6860ac794097c39284af178bf81b8ee99b78bf095c15ed645b057127bef7a301
-
Size
36KB
-
MD5
cb0891c6acde8ba9952751825c4104d9
-
SHA1
1f7bb4423539860311aae49e49674425f316c946
-
SHA256
6860ac794097c39284af178bf81b8ee99b78bf095c15ed645b057127bef7a301
-
SHA512
be43fe92f2a17e20b1d33f4459c65dff856bdea98cb6dce2fc9f181ddbb232e3a5f93341d2b3882c04d35a3c4805cc2f7ccc8221be79fdfa16641befe3a9a31d
-
SSDEEP
384:e6HSdpG5LqV0Emli7oEo5To4vDbyZyOuLTv1xEtuidl1Z1+5tEba2gIlU:THSdXVP6Tj7b4yVPv12t3+5tEZl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6860ac794097c39284af178bf81b8ee99b78bf095c15ed645b057127bef7a301
Files
-
6860ac794097c39284af178bf81b8ee99b78bf095c15ed645b057127bef7a301.dll windows:4 windows x86 arch:x86
1ab3dea03f6512ccdf8b52280ed2bbed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
lstrcatA
GetSystemDirectoryA
FreeLibrary
ExitProcess
GetProcAddress
DisableThreadLibraryCalls
OutputDebugStringA
CloseHandle
ReadFile
GetFileSize
CreateFileA
GetModuleFileNameA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
IsBadReadPtr
HeapFree
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
HeapReAlloc
GetCommandLineA
GetVersion
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
wsprintfA
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ