ir41_qc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7ffdbbfe902bacfb58e3f9f3f9eff400N.dll
Resource
win10v2004-20240709-en
General
-
Target
7ffdbbfe902bacfb58e3f9f3f9eff400N.exe
-
Size
151KB
-
MD5
7ffdbbfe902bacfb58e3f9f3f9eff400
-
SHA1
daa2c7314319043a34472d6893fdfb94221f1e2d
-
SHA256
543d138f958c3262b7589e2ace5ec8bb6a9e9970fdefc4e4fca24b3a1aeb40a3
-
SHA512
e0fc3f33e79c0251a2d2f728f946f89279b0c1c9288655337b4c951bc8658d05e1ded4ca03c6c6aa7f5047a5e18615cf5faacbaf82675a4a1d2e00a94dbc6f2e
-
SSDEEP
3072:aZA3yqORbSg3ImNq8uT3YCmo0Vihpk8gcISXBJRAca/A6:aZAindaUihpk8R8A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ffdbbfe902bacfb58e3f9f3f9eff400N.exe
Files
-
7ffdbbfe902bacfb58e3f9f3f9eff400N.exe.dll windows:10 windows x86 arch:x86
ead6b84642bfcfca087a44c0c1380884
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
api-ms-win-crt-private-l1-1-0
_o___std_type_info_destroy_list
_o__cexit
_o__configure_narrow_argv
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__seh_filter_dll
_o_wcscat_s
_except_handler4_common
api-ms-win-crt-string-l1-1-0
memset
api-ms-win-core-sysinfo-l1-1-0
GetSystemDirectoryW
GetSystemTimeAsFileTime
api-ms-win-core-libraryloader-l1-2-1
LoadLibraryW
api-ms-win-core-libraryloader-l1-2-0
DisableThreadLibraryCalls
GetProcAddress
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-0
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
UnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
Exports
Exports
AllocInstanceData
Compress
CompressBegin
CompressEnd
CompressFramesInfo
DllMain
FreeInstanceData
SetScalability
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ