GameInitDLL
Static task
static1
Behavioral task
behavioral1
Sample
32449bfe60ff7c0cde6b0f62ee9c7c6786e3d61177ac12439bcd86f6d79789ba.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
32449bfe60ff7c0cde6b0f62ee9c7c6786e3d61177ac12439bcd86f6d79789ba.dll
Resource
win10v2004-20240412-en
General
-
Target
32449bfe60ff7c0cde6b0f62ee9c7c6786e3d61177ac12439bcd86f6d79789ba
-
Size
75KB
-
MD5
5b009c1b8502bb5057de61d83a4a56c6
-
SHA1
5e76fe0d7e83a4a99aa30503eaa10940b5b7b157
-
SHA256
32449bfe60ff7c0cde6b0f62ee9c7c6786e3d61177ac12439bcd86f6d79789ba
-
SHA512
93cad68996fac000c7ffa9cab052bdb720e1b7fb9964cefd34c996d3a895de58075a08ca011784d4bab05eb15a20dfa7d629ef1274d89b3bece79d2c4c6cde86
-
SSDEEP
1536:tPbLk2AQQB122m+ogtNOGjDMMVRiKDX80hFqd/fwcxZa2vzE6ylYqp+ho8Cbkj7s:dDqp+hVCb+7Dx7Ahd8gkYHh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32449bfe60ff7c0cde6b0f62ee9c7c6786e3d61177ac12439bcd86f6d79789ba
Files
-
32449bfe60ff7c0cde6b0f62ee9c7c6786e3d61177ac12439bcd86f6d79789ba.dll windows:4 windows x86 arch:x86
e6d329eb25a26725e8c32c17a9226fb9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetOEMCP
HeapAlloc
GetLocalTime
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetProcAddress
GetModuleHandleA
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
HeapFree
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
DisableThreadLibraryCalls
WriteFile
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
LoadLibraryA
GetLastError
FlushFileBuffers
SetFilePointer
ReadFile
SetStdHandle
CloseHandle
Exports
Exports
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ