MSRD3X40.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e6a1f8bd8a818dae8992da88fbd0b7c0N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
e6a1f8bd8a818dae8992da88fbd0b7c0N.dll
Resource
win10v2004-20240709-en
General
-
Target
e6a1f8bd8a818dae8992da88fbd0b7c0N.exe
-
Size
485KB
-
MD5
e6a1f8bd8a818dae8992da88fbd0b7c0
-
SHA1
406002df53dd85656975cc9f90de95ff70e5d283
-
SHA256
e9c8a725c709972bf310f02c03a08e718dcb820b8bf107e1973bde960856f3c7
-
SHA512
d19c07e6bd7de4503f38ef91bc182e355e29815e2724a8afbc583f81c2db46701edb9e48c380df8658dd4c6370a80d8b4c2baa1797f739ce928599556510f3d1
-
SSDEEP
6144:F8Kyp/xiKX0TCJ5T1N6WOWhNT5T33jgBu7ih+oXSh45j+ZCihpiSF+G:F8KIxiKEq5T1N6WOWh0XN5j+mkF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e6a1f8bd8a818dae8992da88fbd0b7c0N.exe
Files
-
e6a1f8bd8a818dae8992da88fbd0b7c0N.exe.dll regsvr32 windows:6 windows x86 arch:x86
0e5ae0145d69a3d962b52b23727d6bd5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mswstr10
ord2
ord1
kernel32
WideCharToMultiByte
HeapAlloc
HeapFree
GetProcessHeap
SetThreadPriority
ResumeThread
GetSystemInfo
VirtualAlloc
VirtualFree
DisableThreadLibraryCalls
GlobalMemoryStatus
GetComputerNameA
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetCurrentThreadId
IsDBCSLeadByte
GetSystemDefaultLangID
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
FindFirstFileA
FindFirstFileW
GetFullPathNameA
GetFullPathNameW
GetShortPathNameW
GetTempFileNameW
GetTempPathW
SetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
GetShortPathNameA
MultiByteToWideChar
GetTempPathA
GetTempFileNameA
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
GetCommandLineA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetProcAddress
GetStringTypeW
ExitProcess
GetModuleHandleExW
GetStdHandle
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
OutputDebugStringW
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
GetLocalTime
GetLastError
CloseHandle
WriteFile
UnlockFile
SetFilePointer
ReadFile
LockFile
GetFileType
GetFileSize
GetFileInformationByHandle
FlushFileBuffers
FindClose
Sleep
GetTickCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Exports
Exports
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 322KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ