.uyrGpyAY1R3sCch1*yt-@CGtiZtkPZ
Static task
static1
Behavioral task
behavioral1
Sample
259c9a5303bca4a357c7122e9f92d470e27abaa2297112e1b8bb338a99eae447.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
259c9a5303bca4a357c7122e9f92d470e27abaa2297112e1b8bb338a99eae447.dll
Resource
win10v2004-20240709-en
General
-
Target
259c9a5303bca4a357c7122e9f92d470e27abaa2297112e1b8bb338a99eae447
-
Size
2.5MB
-
MD5
212db34e34f7e02fb32bd9ea8d68b134
-
SHA1
34961d3e7002d042a9e511dddd700a40738e79f6
-
SHA256
259c9a5303bca4a357c7122e9f92d470e27abaa2297112e1b8bb338a99eae447
-
SHA512
ffc118a0832a5b916293bb882b67bc62b1a40edc7eca278ef9a3eaafc2c1fe8639c8a8f598cdc5c66aa70a49f36c52ff6485a9a64a8d5442922a502835065a3e
-
SSDEEP
49152:VlzNv44gxiO75Nj8sfY5AcOsrPyuM3R4nyFBA:rzN3gxievfrXar6Wny3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 259c9a5303bca4a357c7122e9f92d470e27abaa2297112e1b8bb338a99eae447
Files
-
259c9a5303bca4a357c7122e9f92d470e27abaa2297112e1b8bb338a99eae447.dll windows:5 windows x86 arch:x86
771603aae43be54253b288b9c3625e59
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
HeapReAlloc
FlushFileBuffers
SetCurrentDirectoryW
GetFileSize
GetModuleFileNameA
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
DeleteCriticalSection
Sleep
GetLastError
HeapFree
GetModuleHandleW
GetProcAddress
ExitProcess
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualFree
VirtualAlloc
WriteFile
LoadLibraryA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
setupapi
SetupScanFileQueueW
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 700KB - Virtual size: 697KB
IMAGE_SCN_MEM_READ
.data Size: 304KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ