??4CDlls@@QAEAAV0@ABV0@@Z
Static task
static1
Behavioral task
behavioral1
Sample
c824b17f076ee4fc0febb80558cc8d678270a684bd57003d9e46c3813f9c58db.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c824b17f076ee4fc0febb80558cc8d678270a684bd57003d9e46c3813f9c58db.dll
Resource
win10v2004-20240426-en
General
-
Target
c824b17f076ee4fc0febb80558cc8d678270a684bd57003d9e46c3813f9c58db.dll
-
Size
32KB
-
MD5
ddc34c8cae7b6dae058f3518348f95d0
-
SHA1
9f272b675a00b7465b8ed141e6a9e21ebacb1d51
-
SHA256
c824b17f076ee4fc0febb80558cc8d678270a684bd57003d9e46c3813f9c58db
-
SHA512
580750e68d5974ed2b4c1de3e3f8b38398a809136d111a598b0914dfb4a03c79fef18713462e6e570b1b6b4bd7ce2def0d4b892b9729cd2c73bd31f8e275e38b
-
SSDEEP
384:eFqP3Ca6ZwaUxzTPrvzgCGmj76umlX7yP9wsVIo97wM:eWaUFTPrtGa76VSwgIo97wM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c824b17f076ee4fc0febb80558cc8d678270a684bd57003d9e46c3813f9c58db.dll
Files
-
c824b17f076ee4fc0febb80558cc8d678270a684bd57003d9e46c3813f9c58db.dll.dll windows:4 windows x86 arch:x86
33ee9f10c610dbf62c7c1a9964e5c1e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
ExitProcess
Sleep
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
user32
GetClassNameA
GetWindowTextA
MessageBoxA
EnumWindows
shell32
ShellExecuteA
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ