ir50_qc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
776a5757b8f15ae64b2c9e278be624d0N.dll
Resource
win10v2004-20240802-en
General
-
Target
776a5757b8f15ae64b2c9e278be624d0N.exe
-
Size
151KB
-
MD5
776a5757b8f15ae64b2c9e278be624d0
-
SHA1
5141815783cde3dd6e2afd568aff5e50765d0c9a
-
SHA256
e6f7bbda4aaba4af82c096fb913862f5b04725e26ed68396ecc34b383e53d157
-
SHA512
9e9fcb238fac00b8ff63ac4a46cb1d876f2207c4a59f810a0c08bdec10cf568268a0e37a9e7c524f76566247996c4da91bacf235cf72e6f7229bcdb38a5130aa
-
SSDEEP
3072:8AAXTHRbS99q6ftWYCmoBEihp4CJIaXBJhbcC:8AA0J1tihp4gh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 776a5757b8f15ae64b2c9e278be624d0N.exe
Files
-
776a5757b8f15ae64b2c9e278be624d0N.exe.dll windows:10 windows x86 arch:x86
ead6b84642bfcfca087a44c0c1380884
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
api-ms-win-crt-private-l1-1-0
_o___std_type_info_destroy_list
_o__cexit
_o__configure_narrow_argv
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__seh_filter_dll
_o_wcscat_s
_except_handler4_common
api-ms-win-crt-string-l1-1-0
memset
api-ms-win-core-sysinfo-l1-1-0
GetSystemDirectoryW
GetSystemTimeAsFileTime
api-ms-win-core-libraryloader-l1-2-1
LoadLibraryW
api-ms-win-core-libraryloader-l1-2-0
DisableThreadLibraryCalls
GetProcAddress
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-0
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
UnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
Exports
Exports
AllocInstanceData
Compress
CompressBegin
CompressEnd
CompressFramesInfo
CompressQuery
DllMain
FreeInstanceData
SetCPUID
SetScalability
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ