msclmd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a94c8804136fbbb7559aa56627c6c440N.dll
Resource
win10v2004-20240709-en
General
-
Target
a94c8804136fbbb7559aa56627c6c440N.exe
-
Size
339KB
-
MD5
a94c8804136fbbb7559aa56627c6c440
-
SHA1
0db9a3f70bdf8e2cee08ff66c92d38d767abccfb
-
SHA256
d3a3298e62f0b3b3159a807cf2dd050423765b1cedc2caf93c46236077f8c8bf
-
SHA512
61b4be5e3529eb175dbb0d84ae60eb7bb56e95f121a43bf19a6d49b5ce26ddd5729cc4671c6e1d30b2ee8d71db52a129028e79cbeba33c6512eb7c94622f4f7f
-
SSDEEP
6144:fuA/R5iAqGvkeMTfu1OPmFFSZzwx7RT/YGV+WihpN+cl:fu8R5i7GvkeMTfuEmFIBwx7l/zVEl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a94c8804136fbbb7559aa56627c6c440N.exe
Files
-
a94c8804136fbbb7559aa56627c6c440N.exe.dll windows:10 windows x86 arch:x86
1f9d9c382dcad1e7cab0f38def9fd398
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
swscanf_s
memcpy
_vsnwprintf
sscanf_s
_XcptFilter
_except_handler4_common
free
malloc
_initterm
_stricmp
_vsnprintf
_amsg_exit
memset
winscard
SCardWriteCacheW
SCardStatusW
g_rgSCardT1Pci
SCardControl
SCardReadCacheW
SCardFreeMemory
SCardTransmit
g_rgSCardT0Pci
SCardGetStatusChangeW
kernel32
HeapAlloc
QueryPerformanceCounter
HeapFree
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
LocalFree
GetLastError
GetCurrentThreadId
RaiseException
GetProcessHeap
advapi32
RegGetValueW
SystemFunction036
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
TraceMessage
crypt32
CryptDecodeObject
CertFreeCertificateContext
CryptEncodeObjectEx
CertCreateCertificateContext
rpcrt4
RpcStringFreeW
UuidToStringW
UuidCreate
user32
IsWindow
bcrypt
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptDestroyKey
BCryptEncrypt
BCryptGenerateSymmetricKey
Exports
Exports
CardAcquireContext
CardAcquireContextInternal
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ