Static task
static1
Behavioral task
behavioral1
Sample
b10a1445f16c4829807982e18b130edd11421b60bb6e147204dfe2c22870efa3.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
b10a1445f16c4829807982e18b130edd11421b60bb6e147204dfe2c22870efa3.dll
Resource
win11-20240709-en
General
-
Target
b10a1445f16c4829807982e18b130edd11421b60bb6e147204dfe2c22870efa3
-
Size
2.5MB
-
MD5
37afffebe1742468f9ddffc72886d15f
-
SHA1
32e88607181d6141893267fbc5f76120f8505522
-
SHA256
b10a1445f16c4829807982e18b130edd11421b60bb6e147204dfe2c22870efa3
-
SHA512
bf701dcee0bc5c29dcc8d680e74d0136971ca1e2ff7bfbd8cb5cf4409bc698f06042a68fc74bb2d63392ed9c77cb92ed5d6acbb743934220fa06291309ceb48f
-
SSDEEP
49152:Ve1GAx+NyCDIVJllVgN3t++tEEP9W54WJS55mOPCOIvnIf6qhU:4kAxtGNPw54WJSqO2n1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b10a1445f16c4829807982e18b130edd11421b60bb6e147204dfe2c22870efa3
Files
-
b10a1445f16c4829807982e18b130edd11421b60bb6e147204dfe2c22870efa3.dll windows:5 windows x86 arch:x86
5b0541549ae502567dd60451162a59e1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FlushFileBuffers
SetCurrentDirectoryW
GetFullPathNameW
GetModuleHandleA
GetModuleFileNameA
DuplicateHandle
GlobalDeleteAtom
GetSystemDefaultUILanguage
CreateFileA
LoadLibraryW
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
DeleteCriticalSection
Sleep
GetLastError
HeapFree
GetModuleHandleW
GetProcAddress
ExitProcess
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
VirtualFree
VirtualAlloc
WriteFile
LoadLibraryA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
ole32
CoWaitForMultipleHandles
setupapi
SetupScanFileQueueW
advapi32
NotifyBootConfigStatus
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 700KB - Virtual size: 697KB
IMAGE_SCN_MEM_READ
.data Size: 308KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ