AwcdthodsHlu
Static task
static1
Behavioral task
behavioral1
Sample
c47c81d98d8cef5fd44528f50d424ae1ad8254470b0552565f02e949def81c61.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
c47c81d98d8cef5fd44528f50d424ae1ad8254470b0552565f02e949def81c61.dll
Resource
win11-20240709-en
General
-
Target
c47c81d98d8cef5fd44528f50d424ae1ad8254470b0552565f02e949def81c61
-
Size
2.2MB
-
MD5
940d670fc2ccdc7d904592046edc182a
-
SHA1
7643bb7a830a35d0b70edb682619aa6d199ec83e
-
SHA256
c47c81d98d8cef5fd44528f50d424ae1ad8254470b0552565f02e949def81c61
-
SHA512
e229a5162ceef48959238f1424968044129aec79e829988f01263418a09abda38e95a3f93fc96aa25cfa8d0f1f48a4ddcc016e7ca5266ecfc5ed434c61c70b16
-
SSDEEP
49152:BfI3S/FytNc8ngQoXkc09P9vr7FuXTfJ59KlhLS0VXsLoOE:BRoNc8ngt05dHFetnES0dsc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c47c81d98d8cef5fd44528f50d424ae1ad8254470b0552565f02e949def81c61
Files
-
c47c81d98d8cef5fd44528f50d424ae1ad8254470b0552565f02e949def81c61.dll windows:5 windows x86 arch:x86
322ab185b2fdf4582116c2e45af10db6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
oleaut32
GetRecordInfoFromGuids
mprapi
MprAdminInterfaceTransportAdd
msvcrt
wcscoll
user32
SystemParametersInfoA
SetForegroundWindow
kernel32
SetPriorityClass
AreFileApisANSI
GetModuleHandleA
GetModuleHandleW
GetStringTypeA
OutputDebugStringA
gdi32
SetDCPenColor
Exports
Exports
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT Size: 4KB - Virtual size: 102B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 999B
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ