SortWindows63.pdb
Static task
static1
Behavioral task
behavioral1
Sample
SortWindows63.dll
Resource
win10v2004-20240508-en
General
-
Target
SortWindows63.dll
-
Size
57KB
-
MD5
6fb56c209d6d345d81a507a4bbab0a5a
-
SHA1
99275a742d005cdd889c9e0d02aa5955ec857cbd
-
SHA256
012e54b103aaa67f1e54759e89b56d328347d35dd20fc0b1418c4c0594a35b93
-
SHA512
4e1d974d61e5b1478627f5ac27870b892ee7f6447a9dc2108469e1e31d8b4a12931f67a3ef336681c0f5f05eab506ba63857dc95a2c610b38d4f9ea0256e4f38
-
SSDEEP
768:KxWIN2FtzHHTDja6UZtCfcdbiShHu5PJ68T1iAD1HG1d0j/BfH:H/3O6UvCfShO5x68Z5DJG1KLBfH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SortWindows63.dll
Files
-
SortWindows63.dll.dll windows:10 windows x86 arch:x86
585cf4230b124ed66dfda4b3b08e0a53
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
memmove_s
_except_handler4_common
_initterm
malloc
bsearch
free
_amsg_exit
_XcptFilter
memcmp
memset
ntdll
NtOpenKey
NtClose
NtQueryValueKey
RtlFreeHeap
RtlAllocateHeap
RtlGUIDFromString
RtlInitUnicodeString
kernel32
GetTickCount
CloseHandle
CreateFileMappingW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsValidLocaleName
GetSystemWindowsDirectoryW
MapViewOfFile
SetLastError
Sleep
CreateFileW
Exports
Exports
SortCloseHandle
SortGetHandle
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ