CreateFX
Static task
static1
Behavioral task
behavioral1
Sample
1d2a3fcaf0496a0b7245f82c86d73eb0N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1d2a3fcaf0496a0b7245f82c86d73eb0N.dll
Resource
win10v2004-20240709-en
General
-
Target
1d2a3fcaf0496a0b7245f82c86d73eb0N.exe
-
Size
103KB
-
MD5
1d2a3fcaf0496a0b7245f82c86d73eb0
-
SHA1
d49712b69e065509d675983f32b77aa72788c88c
-
SHA256
8a7b015a1575a291dd14ff5b54113854c96e2c6f4b99d50b57098ea6fe0a8586
-
SHA512
1c18ab1f28ef2755dc4a891f5019c049a2dcda01f0ab67fb284a6c23f3062c3a66bf8323f305b8174a32147436ec189020110e5821d19078b91ebbdcbb9096b4
-
SSDEEP
768:I2HJR4uruXE5pV1zXbtGr8GcgzFWFCMLM5QBionq++N:nUAuXE5pFgiMEionEN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d2a3fcaf0496a0b7245f82c86d73eb0N.exe
Files
-
1d2a3fcaf0496a0b7245f82c86d73eb0N.exe.dll windows:4 windows x64 arch:x64
405b90bda83f36a7dd3d3f1ff3d1dae7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
ntdll
_vsnprintf
ole32
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
ucrtbase
__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
malloc
memcmp
memcpy
memmove
realloc
strchr
strcmp
strcspn
strlen
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 4KB - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 320B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ