Static task
static1
General
-
Target
Evvware_Free.dll
-
Size
314KB
-
MD5
63201b6aec93a8ad063939daf50da3c3
-
SHA1
c37149eb61b81d9be2ed4981e3ee64e2de950f7d
-
SHA256
f9bff906d2dbed93d692f668c6abe9ae711d947d7cc074dffcda44e0716aa362
-
SHA512
3eb9ad2a6ef141b4407cc5e79e7eaa7ff8f950272e6c1806959c5f7c309373dfaddb700b68ff73a8578965f5dca33ac0bc6c101351473a42380c2ad6dcb5efab
-
SSDEEP
6144:01TDguE1EXhMDbKxZxim1a95YJvoHtCh5eAOknp1M2:EDg2XhMD2xZd1a8Jl/eWM2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Evvware_Free.dll
Files
-
Evvware_Free.dll.dll windows:6 windows x86 arch:x86
27517b1f3184b8eabdbef9bbe5b5f5b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
CreateThread
VirtualProtect
VirtualQuery
GetModuleHandleW
MultiByteToWideChar
AllocConsole
AttachConsole
SetConsoleTitleA
SetEndOfFile
ReadConsoleW
ReadFile
HeapReAlloc
HeapSize
IsBadCodePtr
GetTickCount
CreateFileW
CloseHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
SetFilePointerEx
GetFileSizeEx
DecodePointer
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
WriteConsoleW
user32
GetAsyncKeyState
GetCursorPos
ScreenToClient
GetForegroundWindow
advapi32
GetCurrentHwProfileA
ws2_32
socket
closesocket
recv
WSAStartup
WSACleanup
freeaddrinfo
send
getaddrinfo
connect
Sections
.text Size: 229KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ