main
Static task
static1
Behavioral task
behavioral1
Sample
d3962056088b574d024c4213eb043b6b881ae9ea7ab2dc0a5175f9758118a009.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
d3962056088b574d024c4213eb043b6b881ae9ea7ab2dc0a5175f9758118a009.dll
Resource
win10v2004-20240508-en
General
-
Target
d3962056088b574d024c4213eb043b6b881ae9ea7ab2dc0a5175f9758118a009
-
Size
40KB
-
MD5
0b868cf8177ecc3fd559ecbb5c64330f
-
SHA1
4cf8ea4c5ba63aa183df2e1f21ed36d91cc96360
-
SHA256
d3962056088b574d024c4213eb043b6b881ae9ea7ab2dc0a5175f9758118a009
-
SHA512
ace9d79bd503845f7b8f43e87b9d754719dea4bacebe7b7eb0a85709dee7b3e6f510d34cb072cc71a181fac1cfef651ca6f62c0a60f5e36c2b0edd11c5055637
-
SSDEEP
768:tvz/+XiSvuSvuS/DY+NgXFMXBdtkIj5hNs3s3H9serdH:t/aiSVx/DY+iXFMXBd7hmU9se
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3962056088b574d024c4213eb043b6b881ae9ea7ab2dc0a5175f9758118a009
Files
-
d3962056088b574d024c4213eb043b6b881ae9ea7ab2dc0a5175f9758118a009.dll windows:5 windows x86 arch:x86
eb00a1581f0be73451fef0fb47eed470
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetUnhandledExceptionFilter
GetCurrentProcess
GetModuleHandleA
LocalFree
OutputDebugStringA
FormatMessageA
GetLastError
GetProcAddress
LoadLibraryA
UnhandledExceptionFilter
FreeLibrary
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
IsDebuggerPresent
EncodePointer
user32
MessageBoxA
advapi32
InitializeSecurityDescriptor
IsValidAcl
SetEntriesInAclA
AllocateAndInitializeSid
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetSecurityDescriptorDacl
msvcr100
_close
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_read
_open
memcpy
memset
malloc
memmove
strstr
sprintf
free
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ