Static task
static1
Behavioral task
behavioral1
Sample
1dad15af1b5b47190d6125ce618ff14ecfa95368d57b4f934eb1dbbdb7220e93.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1dad15af1b5b47190d6125ce618ff14ecfa95368d57b4f934eb1dbbdb7220e93.dll
Resource
win10v2004-20240508-en
General
-
Target
1dad15af1b5b47190d6125ce618ff14ecfa95368d57b4f934eb1dbbdb7220e93
-
Size
9KB
-
MD5
65058d762386cabf3edbdbfacc7321f2
-
SHA1
5baa4c5828f9f91149975da94758fced4fe0daef
-
SHA256
1dad15af1b5b47190d6125ce618ff14ecfa95368d57b4f934eb1dbbdb7220e93
-
SHA512
f23424d3ebb32ee47f90f9851b62b95ccd884508daaf808de45eed7e88e20eaa25253a1c73fd4beb9ccd2c42d6207c13fcea8b35f317821973fec380486948ec
-
SSDEEP
192:/kkgUVzuwL2PV3PpZWoCJEnRHJGiLNCUhnr5u:tg+2N3PfWovRHJG+dVu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dad15af1b5b47190d6125ce618ff14ecfa95368d57b4f934eb1dbbdb7220e93
Files
-
1dad15af1b5b47190d6125ce618ff14ecfa95368d57b4f934eb1dbbdb7220e93.dll windows:6 windows x86 arch:x86
9b90be66102207b3093973053ec2c675
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LeaveCriticalSection
SetEvent
GetVersion
CreateEventW
CreateThread
WaitForMultipleObjects
WaitForSingleObject
CloseHandle
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
ResetEvent
LocalFree
HeapAlloc
HeapFree
MultiByteToWideChar
VirtualFree
VirtualAlloc
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorA
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
ConvertStringSecurityDescriptorToSecurityDescriptorW
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 534B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ