Static task
static1
Behavioral task
behavioral1
Sample
1485f929d3eec8da6efa5939b001d88f5d77452b753f69a97cb1d07937ee9c8e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1485f929d3eec8da6efa5939b001d88f5d77452b753f69a97cb1d07937ee9c8e.dll
Resource
win10v2004-20240508-en
General
-
Target
1485f929d3eec8da6efa5939b001d88f5d77452b753f69a97cb1d07937ee9c8e
-
Size
147KB
-
MD5
3023397fb440a1887d0d7c1d4cdf1340
-
SHA1
5d6f7feb921d7193802858a262e268bb64d647b0
-
SHA256
1485f929d3eec8da6efa5939b001d88f5d77452b753f69a97cb1d07937ee9c8e
-
SHA512
e4d856401341003d02163ea91a768ddfa652f22ed5e60faf700b1dc4285fd4549848d983f80331d4442381ed404d512e9bfb706e7a799fded069bc5ebc6b4e61
-
SSDEEP
3072:QghkiE2Lxj+7d79ce81Iz5twfPPh7x6BT6LF:QghZhwd7ue81Iz5twfPPh7Ci
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1485f929d3eec8da6efa5939b001d88f5d77452b753f69a97cb1d07937ee9c8e
Files
-
1485f929d3eec8da6efa5939b001d88f5d77452b753f69a97cb1d07937ee9c8e.dll windows:4 windows x86 arch:x86
73299ed48ae42fed191647ca55ea0b62
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
carclw60
CARC__EnterInstance
CARC__ExitInstance
CARC__CallUnderflowError
GOL$83
GOL$C3
GOL$S3
GOL$A3
GOL$COPYDATA
GOL$A8
GOL$35
GOL$M5
GOL$55
GOL$R5
GOL$53
GOL$FILLDATA
CARC__CancelDynamicInstance
CARC__GetDynamicCallAddress
GOL$58
GOL$COPYFILL
GOL$85
GOL$33
GOL$V3_TABLE
GOL$UNPK7
GOL$59
GOL$C0
GOL$C0P
CARC__LocateDelimiterInString
CARC__Inspect
GOL$S8
CARC__AcceptDate
CARC__AcceptFromTime
GOL$D5
CARC__FreeFormatDisplay
GOL$95
CARC__StopRun
_CARC__LibraryMain@12
wsmsru32
_wsms_init@4
_wsms_cleanup@4
_wsms_msg@4
_wsms_message@8
_wsms_set_num_rtlen@8
_wsms_get_num_rtlen@8
_wsms_set_symbols@8
_wmsg_box@12
_wmsg_box_timeout@16
_sms_set_env@4
_wsms_setcursortype@4
sms_yield
Sections
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RCLID_TE Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCLEP_DA Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ