DXCoreCreateAdapterFactory
Static task
static1
Behavioral task
behavioral1
Sample
c1d34171292692be8ba8191ff3af12af20b1faeb841e3fbf2856c9366a4de704.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c1d34171292692be8ba8191ff3af12af20b1faeb841e3fbf2856c9366a4de704.dll
Resource
win10v2004-20240412-en
General
-
Target
c1d34171292692be8ba8191ff3af12af20b1faeb841e3fbf2856c9366a4de704
-
Size
55KB
-
MD5
a26d7f1a3e732ed9e06ee1a55ede64dc
-
SHA1
fa92080c261f829cd842a3f566743049474f3f17
-
SHA256
c1d34171292692be8ba8191ff3af12af20b1faeb841e3fbf2856c9366a4de704
-
SHA512
d89098be20bdd1c64dd4ecbf2010fa282ceee01220b4336514563807d2627d3882eea65c7592eb8c1d55ab458f60a004687de3d9eab1de5d8e2a11c700d90737
-
SSDEEP
384:IUh+LRsHC1Os0MH1CORlHfCOp0bgU+wnQ0:IS+LRsmp196Q0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1d34171292692be8ba8191ff3af12af20b1faeb841e3fbf2856c9366a4de704
Files
-
c1d34171292692be8ba8191ff3af12af20b1faeb841e3fbf2856c9366a4de704.dll windows:4 windows x64 arch:x64
7c0a4a75446614320214ad26c0b8e9ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
QueryPerformanceCounter
QueryPerformanceFrequency
ntdll
_vsnprintf
ucrtbase
__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcspn
strlen
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 4KB - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 151B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ