__DebuggerHookData
Static task
static1
Behavioral task
behavioral1
Sample
282ba6b44028cadad4123d6e5a6dedff089906c4ffd23c024ffdb8ac37943f4d.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
282ba6b44028cadad4123d6e5a6dedff089906c4ffd23c024ffdb8ac37943f4d.dll
Resource
win10v2004-20240611-en
General
-
Target
282ba6b44028cadad4123d6e5a6dedff089906c4ffd23c024ffdb8ac37943f4d.exe
-
Size
28KB
-
MD5
f90b5837e2158637d7db9ea4661328e0
-
SHA1
da5300aefa82b4aa8e0dae80b056caed12c511a2
-
SHA256
282ba6b44028cadad4123d6e5a6dedff089906c4ffd23c024ffdb8ac37943f4d
-
SHA512
733dfcf07fce641cfd7b1e0f2fe4d3be7df5a761d2cdf63af9735cb9e15f2a823a4da266d47a5d9cd2e2b3abf1592b26abcdea7c5bd4a9887775db50e70c4ef1
-
SSDEEP
384:+qL6EIgCjQlS0B0qO0tT240Zj9zP7O060iV7Nxw7OyDK8Q/KC:J6EIgCMZRoMZFyDK8Q/KC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 282ba6b44028cadad4123d6e5a6dedff089906c4ffd23c024ffdb8ac37943f4d.exe
Files
-
282ba6b44028cadad4123d6e5a6dedff089906c4ffd23c024ffdb8ac37943f4d.exe.dll windows:1 windows x86 arch:x86
c459f5d12963d0cd31ea414bf3cc316b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
cw3220
@xmsg@$bdtr$qv
___debuggerDisableTerminateCallback
__Return_unwind
__ErrorMessage
__startup
__free_heaps
_flushall
__startupd
_abort
__ExceptionHandler
@_CatchCleanup$qv
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
@string@$bctr$qpxc
@string@$bdtr$qv
@string@assign$qrx6stringuiui
kernel32
GetVersion
GetProcAddress
GetModuleHandleA
bids50f
@TStreamableBase@$bdtr$qv
owl50f
@TModule@$bdtr$qv
@TModule@$bctr$qpxcp11HINSTANCE__
@TApplication@InitCmdShow
@TApplication@InitHPrevInstance
@TApplication@InitHInstance
@TApplication@InitCmdLine
@HandleGlobalException$qr4xmsgpct2
Exports
Exports
Sections
CODE Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ