Static task
static1
Behavioral task
behavioral1
Sample
bce0767bd4645a14eab1ed9f498fca2ca6d9570f85f5fdba3c6ae731cf2c2907.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bce0767bd4645a14eab1ed9f498fca2ca6d9570f85f5fdba3c6ae731cf2c2907.dll
Resource
win10v2004-20240226-en
General
-
Target
bce0767bd4645a14eab1ed9f498fca2ca6d9570f85f5fdba3c6ae731cf2c2907
-
Size
150KB
-
MD5
449f4d3308142801e4bc273f126c1f4b
-
SHA1
3162cfff2c00868ec392efe5229c0ba7c8db43b1
-
SHA256
bce0767bd4645a14eab1ed9f498fca2ca6d9570f85f5fdba3c6ae731cf2c2907
-
SHA512
81b5d3bf12bf068bcd0e6071dd166fb3a8ae5b668086cc8dc1b00ba40849f1936db7328772b3736eef00c46418bdc14a12ebe33eeb95392faf1e54e31b3c7229
-
SSDEEP
768:IxfFr315OYuym49/IgMdjrlLFJH1RDyN8529J8xBo+oU6RFZKWjSZKV/YdQ4Ofac:693fOtjrlGrsxBo+Ldl0YdQnfY0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bce0767bd4645a14eab1ed9f498fca2ca6d9570f85f5fdba3c6ae731cf2c2907
Files
-
bce0767bd4645a14eab1ed9f498fca2ca6d9570f85f5fdba3c6ae731cf2c2907.dll windows:4 windows x86 arch:x86
adfb32f477afec01679650d63e00f8f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
hidparse.sys
HidP_GetCaps
HidP_GetSpecificValueCaps
HidP_GetUsages
HidP_GetUsageValue
kernel32
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrW
MulDiv
ntdll
_vsnprintf
ntoskrnl.exe
IoAttachDeviceToDeviceStack
IoBuildAsynchronousFsdRequest
IoBuildDeviceIoControlRequest
IoBuildSynchronousFsdRequest
IoCallDriver
IoCompleteRequest
IoCreateDevice
IoDeleteDevice
IoDetachDevice
KeInitializeEvent
KeSetEvent
KeWaitForSingleObject
ucrtbase
__acrt_iob_func
__stdio_common_vsprintf
_strdup
calloc
free
fwrite
getenv
malloc
memcmp
memmove
strchr
strcmp
strcspn
strlen
win32u
NtUserCallHwndParam
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 4KB - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 160B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 107B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/4 Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 4KB - Virtual size: 825B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ