r
Static task
static1
Behavioral task
behavioral1
Sample
15e24dd82712de050173efb1575252eda91bff36ed5ef3e9ffbb726fa9dfa1bd.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15e24dd82712de050173efb1575252eda91bff36ed5ef3e9ffbb726fa9dfa1bd.dll
Resource
win10v2004-20240508-en
General
-
Target
15e24dd82712de050173efb1575252eda91bff36ed5ef3e9ffbb726fa9dfa1bd
-
Size
66KB
-
MD5
dfe8f848307ff33a7ad753f2eb0da499
-
SHA1
ce4c4b367573baeb48a9dfc550fbd68dbaf6bfb7
-
SHA256
15e24dd82712de050173efb1575252eda91bff36ed5ef3e9ffbb726fa9dfa1bd
-
SHA512
cb6e77dd6205fdc16cc5a1d05c682602bbbd3fa8d085b71aafd7303bda673106be92fb33d7c2f51df47607c50b5fb846a78efe3a7c6a50537051b05928a79f9b
-
SSDEEP
1536:jpF0gVFQpmL5S6qb9WDmFs6G/Q9mdMPJ7g0j/t:XNSvPJ7gu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15e24dd82712de050173efb1575252eda91bff36ed5ef3e9ffbb726fa9dfa1bd
Files
-
15e24dd82712de050173efb1575252eda91bff36ed5ef3e9ffbb726fa9dfa1bd.dll windows:5 windows x86 arch:x86
de0ef7fe12e8ed7f4026b0d1672c5ba3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ