Static task
static1
Behavioral task
behavioral1
Sample
1642b68c3ed41bf32ab55a8099558371b521f628d0626c8a686d6fee6010a654.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1642b68c3ed41bf32ab55a8099558371b521f628d0626c8a686d6fee6010a654.dll
Resource
win10v2004-20240508-en
General
-
Target
1642b68c3ed41bf32ab55a8099558371b521f628d0626c8a686d6fee6010a654
-
Size
9KB
-
MD5
e1aa7d8037728ce5a69cadcc5f21fe65
-
SHA1
f1e7e9ac440ef4e72067957e2349f9033db0e3e1
-
SHA256
1642b68c3ed41bf32ab55a8099558371b521f628d0626c8a686d6fee6010a654
-
SHA512
6875a314e582014434cb5eef32d6c581cd83d0bd9fc89e4a949e6603953ba8ae85331339918c5f0763ba7f5e41c8d4e627fe8c42e67971a0901a3be6c22f461d
-
SSDEEP
192:/kkgUVzuwL2PV3PpZWoCJEnRHJGkNCUhnr5u:tg+2N3PfWovRHJGkdVu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1642b68c3ed41bf32ab55a8099558371b521f628d0626c8a686d6fee6010a654
Files
-
1642b68c3ed41bf32ab55a8099558371b521f628d0626c8a686d6fee6010a654.dll windows:6 windows x86 arch:x86
9b90be66102207b3093973053ec2c675
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LeaveCriticalSection
SetEvent
GetVersion
CreateEventW
CreateThread
WaitForMultipleObjects
WaitForSingleObject
CloseHandle
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
ResetEvent
LocalFree
HeapAlloc
HeapFree
MultiByteToWideChar
VirtualFree
VirtualAlloc
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorA
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
ConvertStringSecurityDescriptorToSecurityDescriptorW
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 534B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ