Static task
static1
Behavioral task
behavioral1
Sample
3631e8ba8e7b7fd109fde0c4e843601ab7bf13e00a748fc98ddbece86e827a61.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3631e8ba8e7b7fd109fde0c4e843601ab7bf13e00a748fc98ddbece86e827a61.dll
Resource
win10v2004-20240412-en
General
-
Target
3631e8ba8e7b7fd109fde0c4e843601ab7bf13e00a748fc98ddbece86e827a61
-
Size
505KB
-
MD5
824e0f04b1907a2f5a636cc99b45d3cb
-
SHA1
d07cbeb6cec20421ccc0303c131b3f64be48e242
-
SHA256
3631e8ba8e7b7fd109fde0c4e843601ab7bf13e00a748fc98ddbece86e827a61
-
SHA512
545f1a323eff61945fa87445ebaacdd7b7b0cbec2c1b54b0080a7092a8ca8741af4c1de3dc921926cc5d80eaa3706764fbfac5f6155ac16ff3053e11b985c983
-
SSDEEP
6144:zyrO3wOQ44lXZMEGvX2q5Xq+fEMAhTr1ybTrBvCq2CpGTJ4jbXf0ALXy6G:z53rQ44vvGvX2qR1fADy1CUECjbbpG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3631e8ba8e7b7fd109fde0c4e843601ab7bf13e00a748fc98ddbece86e827a61
Files
-
3631e8ba8e7b7fd109fde0c4e843601ab7bf13e00a748fc98ddbece86e827a61.dll windows:4 windows x86 arch:x86
789692eb0f1d343f6951a1776189c231
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
cygwin1
__cxa_atexit
__getreent
__locale_ctype_ptr
_impure_ptr
abort
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
fgetc
fprintf
fputc
fread
free
fscanf
fwrite
getc
malloc
memcpy
memset
nl_langinfo
posix_memalign
printf
putc
putchar
puts
raise
realloc
snprintf
sscanf
strchr
strlen
strtol
ungetc
vfprintf
vsnprintf
vsprintf
kernel32
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
Exports
Exports
__gcc_deregister_frame
__gcc_register_frame
__gmp_0
__gmp_allocate_func
__gmp_asprintf
__gmp_asprintf_final
__gmp_asprintf_funs
__gmp_asprintf_memory
__gmp_asprintf_reps
__gmp_assert_fail
__gmp_assert_header
__gmp_binvert_limb_table
__gmp_bits_per_limb
__gmp_default_allocate
__gmp_default_fp_limb_precision
__gmp_default_free
__gmp_default_reallocate
__gmp_digit_value_tab
__gmp_divide_by_zero
__gmp_doprnt
__gmp_doprnt_integer
__gmp_doprnt_mpf2
__gmp_doscan
__gmp_errno
__gmp_exception
__gmp_extract_double
__gmp_fac2cnt_table
__gmp_fib_table
__gmp_fprintf
__gmp_fprintf_funs
__gmp_free_func
__gmp_fscanf
__gmp_fscanf_funs
__gmp_get_memory_functions
__gmp_init_primesieve
__gmp_invalid_operation
__gmp_jacobi_table
__gmp_junk
__gmp_limbroots_table
__gmp_mt_recalc_buffer
__gmp_nextprime
__gmp_odd2fac_table
__gmp_oddfac_table
__gmp_primesieve
__gmp_printf
__gmp_randclear
__gmp_randclear_mt
__gmp_randget_mt
__gmp_randinit
__gmp_randinit_default
__gmp_randinit_lc_2exp
__gmp_randinit_lc_2exp_size
__gmp_randinit_mt
__gmp_randinit_mt_noseed
__gmp_randinit_set
__gmp_randiset_mt
__gmp_rands
__gmp_rands_initialized
__gmp_randseed
__gmp_randseed_ui
__gmp_reallocate_func
__gmp_scanf
__gmp_set_memory_functions
__gmp_snprintf
__gmp_snprintf_funs
__gmp_sprintf
__gmp_sprintf_funs
__gmp_sqrt_of_negative
__gmp_sscanf
__gmp_sscanf_funs
__gmp_tmp_reentrant_alloc
__gmp_tmp_reentrant_free
__gmp_urandomb_ui
__gmp_urandomm_ui
__gmp_vasprintf
__gmp_version
__gmp_vfprintf
__gmp_vfscanf
__gmp_vprintf
__gmp_vscanf
__gmp_vsnprintf
__gmp_vsprintf
__gmp_vsscanf
__gmpf_abs
__gmpf_add
__gmpf_add_ui
__gmpf_ceil
__gmpf_clear
__gmpf_clears
__gmpf_cmp
__gmpf_cmp_d
__gmpf_cmp_si
__gmpf_cmp_ui
__gmpf_cmp_z
__gmpf_div
__gmpf_div_2exp
__gmpf_div_ui
__gmpf_dump
__gmpf_eq
__gmpf_fits_sint_p
__gmpf_fits_slong_p
__gmpf_fits_sshort_p
__gmpf_fits_uint_p
__gmpf_fits_ulong_p
__gmpf_fits_ushort_p
__gmpf_floor
__gmpf_get_d
__gmpf_get_d_2exp
__gmpf_get_default_prec
__gmpf_get_prec
__gmpf_get_si
__gmpf_get_str
__gmpf_get_ui
__gmpf_init
__gmpf_init2
__gmpf_init_set
__gmpf_init_set_d
__gmpf_init_set_si
__gmpf_init_set_str
__gmpf_init_set_ui
__gmpf_inits
__gmpf_inp_str
__gmpf_integer_p
__gmpf_mul
__gmpf_mul_2exp
__gmpf_mul_ui
__gmpf_neg
__gmpf_out_str
__gmpf_pow_ui
__gmpf_random2
__gmpf_reldiff
__gmpf_set
__gmpf_set_d
__gmpf_set_default_prec
__gmpf_set_prec
__gmpf_set_prec_raw
__gmpf_set_q
__gmpf_set_si
__gmpf_set_str
__gmpf_set_ui
__gmpf_set_z
__gmpf_size
__gmpf_sqrt
__gmpf_sqrt_ui
__gmpf_sub
__gmpf_sub_ui
__gmpf_swap
__gmpf_trunc
__gmpf_ui_div
__gmpf_ui_sub
__gmpf_urandomb
__gmpn_add
__gmpn_add_1
__gmpn_add_err1_n
__gmpn_add_err2_n
__gmpn_add_err3_n
__gmpn_add_n
__gmpn_add_n_atom
__gmpn_add_n_init
__gmpn_add_n_k6
__gmpn_add_n_k7
__gmpn_add_n_p6
__gmpn_add_n_pentium
__gmpn_add_n_pentium4_sse2
__gmpn_add_n_sub_n
__gmpn_add_n_x86
__gmpn_add_nc_atom
__gmpn_add_nc_k6
__gmpn_add_nc_k7
__gmpn_add_nc_p6
__gmpn_add_nc_pentium
__gmpn_add_nc_pentium4_sse2
__gmpn_add_nc_x86
__gmpn_addlsh1_n
__gmpn_addlsh1_n_init
__gmpn_addlsh2_n
__gmpn_addlsh2_n_init
__gmpn_addmul_1
__gmpn_addmul_1_atom_sse2
__gmpn_addmul_1_init
__gmpn_addmul_1_k6
__gmpn_addmul_1_k7
__gmpn_addmul_1_p6
__gmpn_addmul_1_p6_sse2
__gmpn_addmul_1_pentium
__gmpn_addmul_1_pentium4_sse2
__gmpn_addmul_1_x86
__gmpn_addmul_1c_atom_sse2
__gmpn_addmul_1c_k6
__gmpn_addmul_1c_p6
__gmpn_addmul_1c_p6_sse2
__gmpn_addmul_1c_pentium
__gmpn_addmul_1c_pentium4_sse2
__gmpn_addmul_2
__gmpn_addmul_2_init
__gmpn_and_n
__gmpn_andn_n
__gmpn_bases
__gmpn_bc_mulmod_bnm1
__gmpn_bc_set_str
__gmpn_bdiv_dbm1c
__gmpn_bdiv_dbm1c_atom_sse2
__gmpn_bdiv_dbm1c_init
__gmpn_bdiv_dbm1c_pentium4_sse2
__gmpn_bdiv_dbm1c_x86
__gmpn_bdiv_q
__gmpn_bdiv_q_1
__gmpn_bdiv_q_itch
__gmpn_bdiv_qr
__gmpn_bdiv_qr_itch
__gmpn_binvert
__gmpn_binvert_itch
__gmpn_broot
__gmpn_broot_invm1
__gmpn_brootinv
__gmpn_bsqrt
__gmpn_bsqrtinv
__gmpn_clz_tab
__gmpn_cmp
__gmpn_cnd_add_n
__gmpn_cnd_add_n_atom
__gmpn_cnd_add_n_init
__gmpn_cnd_add_n_pentium4_sse2
__gmpn_cnd_add_n_x86
__gmpn_cnd_sub_n
__gmpn_cnd_sub_n_atom
__gmpn_cnd_sub_n_init
__gmpn_cnd_sub_n_pentium4_sse2
__gmpn_cnd_sub_n_x86
__gmpn_cnd_swap
__gmpn_com
__gmpn_com_fat
__gmpn_com_init
__gmpn_com_k6_mmx
__gmpn_com_k7_mmx
__gmpn_com_pentium
__gmpn_copyd
__gmpn_copyd_atom_mmx
__gmpn_copyd_init
__gmpn_copyd_k6_k62mmx
__gmpn_copyd_k7_mmx
__gmpn_copyd_p6
__gmpn_copyd_pentium
__gmpn_copyd_pentium4
__gmpn_copyd_x86
__gmpn_copyi
__gmpn_copyi_atom_mmx
__gmpn_copyi_init
__gmpn_copyi_k7_mmx
__gmpn_copyi_pentium
__gmpn_copyi_pentium4
__gmpn_copyi_x86
__gmpn_cpuid
__gmpn_cpuid_available
__gmpn_cpuvec
__gmpn_cpuvec_init
__gmpn_cpuvec_initialized
__gmpn_dc_set_str
__gmpn_dcpi1_bdiv_q
__gmpn_dcpi1_bdiv_q_n
__gmpn_dcpi1_bdiv_q_n_itch
__gmpn_dcpi1_bdiv_qr
__gmpn_dcpi1_bdiv_qr_n
__gmpn_dcpi1_bdiv_qr_n_itch
__gmpn_dcpi1_div_q
__gmpn_dcpi1_div_qr
__gmpn_dcpi1_div_qr_n
__gmpn_dcpi1_divappr_q
__gmpn_dcpi1_divappr_q_n
__gmpn_div_q
__gmpn_div_qr_1
__gmpn_div_qr_1n_pi1
__gmpn_div_qr_2
__gmpn_div_qr_2n_pi1
__gmpn_div_qr_2u_pi1
__gmpn_divexact
__gmpn_divexact_1
__gmpn_divexact_1_atom
__gmpn_divexact_1_init
__gmpn_divexact_1_k6_mmx
__gmpn_divexact_1_k7
__gmpn_divexact_1_p6
__gmpn_divexact_1_pentium
__gmpn_divexact_1_pentium4_sse2
__gmpn_divexact_1_x86
__gmpn_divexact_by3
__gmpn_divexact_by3c
__gmpn_divisible_p
__gmpn_divmod_1
__gmpn_divrem
__gmpn_divrem_1
__gmpn_divrem_1_atom_sse2
__gmpn_divrem_1_init
__gmpn_divrem_1_k6
__gmpn_divrem_1_k7_mmx
__gmpn_divrem_1_p6_mmx
__gmpn_divrem_1_pentium4_sse2
__gmpn_divrem_1_x86
__gmpn_divrem_1c_atom_sse2
__gmpn_divrem_1c_k6
__gmpn_divrem_1c_k7_mmx
__gmpn_divrem_1c_p6_mmx
__gmpn_divrem_1c_pentium4_sse2
__gmpn_divrem_1c_x86
__gmpn_divrem_2
__gmpn_dump
__gmpn_fft_best_k
__gmpn_fft_next_size
__gmpn_fib2_ui
__gmpn_gcd
__gmpn_gcd_1
__gmpn_gcd_1_fat
__gmpn_gcd_1_init
__gmpn_gcd_1_k6
__gmpn_gcd_1_k7
__gmpn_gcd_1_p6
__gmpn_gcd_subdiv_step
__gmpn_gcdext
__gmpn_gcdext_1
__gmpn_gcdext_hook
__gmpn_gcdext_lehmer_n
__gmpn_get_d
__gmpn_get_str
__gmpn_hamdist
__gmpn_hgcd
__gmpn_hgcd2
__gmpn_hgcd2_jacobi
__gmpn_hgcd_appr
__gmpn_hgcd_appr_itch
__gmpn_hgcd_itch
__gmpn_hgcd_jacobi
__gmpn_hgcd_matrix_adjust
__gmpn_hgcd_matrix_init
__gmpn_hgcd_matrix_mul
__gmpn_hgcd_matrix_mul_1
__gmpn_hgcd_matrix_update_q
__gmpn_hgcd_mul_matrix1_vector
__gmpn_hgcd_reduce
__gmpn_hgcd_reduce_itch
__gmpn_hgcd_step
__gmpn_invert
__gmpn_invertappr
__gmpn_ior_n
__gmpn_iorn_n
__gmpn_jacobi_2
__gmpn_jacobi_base
__gmpn_jacobi_n
__gmpn_lshift
__gmpn_lshift_atom
__gmpn_lshift_init
__gmpn_lshift_k6_k62mmx
__gmpn_lshift_k6_mmx
__gmpn_lshift_k7_mmx
__gmpn_lshift_p6_mmx
__gmpn_lshift_pentium
__gmpn_lshift_pentium4_mmx
__gmpn_lshift_pentium_mmx
__gmpn_lshift_x86
__gmpn_lshiftc
__gmpn_lshiftc_atom
__gmpn_lshiftc_fat
__gmpn_lshiftc_init
__gmpn_matrix22_mul
__gmpn_matrix22_mul1_inverse_vector
__gmpn_matrix22_mul_itch
__gmpn_matrix22_mul_strassen
__gmpn_mod_1
__gmpn_mod_1_1p
__gmpn_mod_1_1p_atom_sse2
__gmpn_mod_1_1p_cps
__gmpn_mod_1_1p_cps_atom_sse2
__gmpn_mod_1_1p_cps_fat
__gmpn_mod_1_1p_cps_init
__gmpn_mod_1_1p_cps_k7
__gmpn_mod_1_1p_cps_p6_sse2
__gmpn_mod_1_1p_cps_pentium4_sse2
__gmpn_mod_1_1p_fat
__gmpn_mod_1_1p_init
__gmpn_mod_1_1p_k7
__gmpn_mod_1_1p_p6_sse2
__gmpn_mod_1_1p_pentium4_sse2
__gmpn_mod_1_fat
__gmpn_mod_1_init
__gmpn_mod_1s_2p
__gmpn_mod_1s_2p_cps
__gmpn_mod_1s_2p_cps_fat
__gmpn_mod_1s_2p_cps_init
__gmpn_mod_1s_2p_fat
__gmpn_mod_1s_2p_init
__gmpn_mod_1s_3p
__gmpn_mod_1s_3p_cps
__gmpn_mod_1s_4p
__gmpn_mod_1s_4p_atom_sse2
__gmpn_mod_1s_4p_cps
__gmpn_mod_1s_4p_cps_atom_sse2
__gmpn_mod_1s_4p_cps_fat
__gmpn_mod_1s_4p_cps_init
__gmpn_mod_1s_4p_cps_k7
__gmpn_mod_1s_4p_cps_p6_sse2
__gmpn_mod_1s_4p_cps_pentium4_sse2
__gmpn_mod_1s_4p_fat
__gmpn_mod_1s_4p_init
__gmpn_mod_1s_4p_k7
__gmpn_mod_1s_4p_p6_sse2
__gmpn_mod_1s_4p_pentium4_sse2
__gmpn_mod_34lsub1
__gmpn_mod_34lsub1_atom
__gmpn_mod_34lsub1_init
__gmpn_mod_34lsub1_k6
__gmpn_mod_34lsub1_k7
__gmpn_mod_34lsub1_p6
__gmpn_mod_34lsub1_pentium
__gmpn_mod_34lsub1_pentium4_sse2
__gmpn_mod_34lsub1_x86
__gmpn_modexact_1_odd_atom
__gmpn_modexact_1_odd_k6
__gmpn_modexact_1_odd_k7
__gmpn_modexact_1_odd_p6
__gmpn_modexact_1_odd_pentium
__gmpn_modexact_1_odd_pentium4_sse2
__gmpn_modexact_1c_odd
__gmpn_modexact_1c_odd_atom
__gmpn_modexact_1c_odd_fat
__gmpn_modexact_1c_odd_init
__gmpn_modexact_1c_odd_k6
__gmpn_modexact_1c_odd_k7
__gmpn_modexact_1c_odd_p6
__gmpn_modexact_1c_odd_pentium
__gmpn_modexact_1c_odd_pentium4_sse2
__gmpn_mu_bdiv_q
__gmpn_mu_bdiv_q_itch
__gmpn_mu_bdiv_qr
__gmpn_mu_bdiv_qr_itch
__gmpn_mu_div_q
__gmpn_mu_div_q_itch
__gmpn_mu_div_qr
__gmpn_mu_div_qr_choose_in
__gmpn_mu_div_qr_itch
__gmpn_mu_divappr_q
__gmpn_mu_divappr_q_choose_in
__gmpn_mu_divappr_q_itch
__gmpn_mul
__gmpn_mul_1
__gmpn_mul_1_atom_sse2
__gmpn_mul_1_init
__gmpn_mul_1_k6
__gmpn_mul_1_k7
__gmpn_mul_1_p6_sse2
__gmpn_mul_1_pentium
__gmpn_mul_1_pentium4_sse2
__gmpn_mul_1_pentium_mmx
__gmpn_mul_1_x86
__gmpn_mul_1c_atom_sse2
__gmpn_mul_1c_k6
__gmpn_mul_1c_k7
__gmpn_mul_1c_p6_sse2
__gmpn_mul_1c_pentium
__gmpn_mul_1c_pentium4_sse2
__gmpn_mul_basecase
__gmpn_mul_basecase_atom_sse2
__gmpn_mul_basecase_init
__gmpn_mul_basecase_k6
__gmpn_mul_basecase_k7
__gmpn_mul_basecase_p6
__gmpn_mul_basecase_p6_sse2
__gmpn_mul_basecase_pentium
__gmpn_mul_basecase_pentium4_sse2
__gmpn_mul_basecase_x86
__gmpn_mul_fft
__gmpn_mul_n
__gmpn_mullo_basecase
__gmpn_mullo_basecase_fat
__gmpn_mullo_basecase_init
__gmpn_mullo_n
__gmpn_mulmid
__gmpn_mulmid_basecase
__gmpn_mulmid_n
__gmpn_mulmod_bnm1
__gmpn_mulmod_bnm1_next_size
__gmpn_nand_n
__gmpn_neg
__gmpn_ni_invertappr
__gmpn_nior_n
__gmpn_nussbaumer_mul
__gmpn_perfect_power_p
__gmpn_perfect_square_p
__gmpn_pi1_bdiv_q_1
__gmpn_popcount
__gmpn_pow_1
__gmpn_powlo
__gmpn_powm
__gmpn_preinv_divrem_1
__gmpn_preinv_divrem_1_atom_sse2
__gmpn_preinv_divrem_1_init
__gmpn_preinv_divrem_1_k7_mmx
__gmpn_preinv_divrem_1_p6_mmx
__gmpn_preinv_divrem_1_pentium4_sse2
__gmpn_preinv_mod_1
__gmpn_preinv_mod_1_init
__gmpn_preinv_mod_1_k6
Sections
.text Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 308B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/14 Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ