mexFunction
Static task
static1
Behavioral task
behavioral1
Sample
e02f606a5dd6ba5095becedb45467f994256c28f6cfa6535419ca0fd28a18366.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e02f606a5dd6ba5095becedb45467f994256c28f6cfa6535419ca0fd28a18366.dll
Resource
win10v2004-20240426-en
General
-
Target
e02f606a5dd6ba5095becedb45467f994256c28f6cfa6535419ca0fd28a18366
-
Size
52KB
-
MD5
6c2a9d4d9d5f122a1368df026577d28a
-
SHA1
5d6543fb16a943f1633cfda6cdf8e722be1a01a0
-
SHA256
e02f606a5dd6ba5095becedb45467f994256c28f6cfa6535419ca0fd28a18366
-
SHA512
854791b9e6d9461baca2f1df9b34ee25ae76d05f7e43ad66cd9a6046fc7ea8eca50fe95b9da18ccf80b8072546e51a9af91a17caa8a063d05d7febdaad8caacc
-
SSDEEP
384:Z/NQAcvWdOiqghZ6yLCgZC2evb5hLA2tK7iB9WhzGlkA4pPoYE5xxxxMPr3m:o8aghZ6jn3UiB92zyGpoYuxxxxer3m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e02f606a5dd6ba5095becedb45467f994256c28f6cfa6535419ca0fd28a18366
Files
-
e02f606a5dd6ba5095becedb45467f994256c28f6cfa6535419ca0fd28a18366.dll windows:4 windows x86 arch:x86
8c67cee234033b25db36eecd07f5d77d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
libmx
mxGetN
mxGetM
mxGetScalar
mxIsChar
mxIsDouble
mxCreateDoubleMatrix
mxCreateCharArray
mxGetData
mxCreateString
mxGetPr
mxDestroyArray
libmex
mexErrMsgTxt
kernel32
HeapFree
SetHandleCount
LCMapStringW
LCMapStringA
RtlUnwind
LoadLibraryA
GetACP
GetCPInfo
GetOEMCP
HeapReAlloc
VirtualAlloc
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetEnvironmentStrings
WideCharToMultiByte
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW
HeapAlloc
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
MultiByteToWideChar
GetStringTypeA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ