distrib
Static task
static1
Behavioral task
behavioral1
Sample
26757a7eb978e3076163147b6f13237731ac3a87f620949dff4024ce274a0590.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26757a7eb978e3076163147b6f13237731ac3a87f620949dff4024ce274a0590.dll
Resource
win10v2004-20240426-en
General
-
Target
26757a7eb978e3076163147b6f13237731ac3a87f620949dff4024ce274a0590
-
Size
64KB
-
MD5
bccc326c9cb39b3bc1f288456db36aae
-
SHA1
9523c3b9180ebd8de1372fe073db60a0492747a4
-
SHA256
26757a7eb978e3076163147b6f13237731ac3a87f620949dff4024ce274a0590
-
SHA512
c4e3349b45e804e0fe88fa70c924af27cc441238390d1b7b8fc0a31620138ad4f4f862636a3d89ab9142720b92c7df973c885240105d7308d307e77de8e56012
-
SSDEEP
768:al0JLUpldEjNzWSYemf9xNnwBiTKiuxIJ91z4Q2uAnmUQ3JVfUiB9/FH8hSNkKNc:80J27df7ZkiTKFo96+ff/GexoTQI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26757a7eb978e3076163147b6f13237731ac3a87f620949dff4024ce274a0590
Files
-
26757a7eb978e3076163147b6f13237731ac3a87f620949dff4024ce274a0590.dll windows:4 windows x86 arch:x86
86b571d14aebdb8d18aea76f7eeed3b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ldepar
OpenSV1
LoadSV1
CloseSV1
kernel32
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetLastError
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
WriteFile
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
GetProcAddress
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
SetFilePointer
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
ReadFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
CreateFileA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ