ir50_32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
33f1f889da7d664a2891f5b241d39150N.dll
Resource
win10v2004-20240802-en
General
-
Target
33f1f889da7d664a2891f5b241d39150N.exe
-
Size
151KB
-
MD5
33f1f889da7d664a2891f5b241d39150
-
SHA1
9fdebbdfe6ecd40588e3d944064a4173cc287f3d
-
SHA256
8142ab21027a1b9b8828d41d2683498ceffa91cbf41dcb578247abeb4247a669
-
SHA512
d3d699bb903d9139c3111fbbbfb08ceeace5d276041438f9b823d309d9b5d07d2269e8512377e7d126c21adf413a5b9e3a84d6cd668a74447e38a16d2ff05def
-
SSDEEP
3072:dDr3XbyRbSA7TC0ilYCmoMvihpWvmIRXBJKMcNJpE:dDrHeix8ihpWlKRm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33f1f889da7d664a2891f5b241d39150N.exe
Files
-
33f1f889da7d664a2891f5b241d39150N.exe.dll regsvr32 windows:10 windows x86 arch:x86
0318e4689d3b0d6ddf9db910a447b65b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
api-ms-win-crt-private-l1-1-0
_o___std_type_info_destroy_list
_o__cexit
_o__configure_narrow_argv
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__seh_filter_dll
_o_wcscat_s
_except_handler4_common
api-ms-win-crt-string-l1-1-0
memset
api-ms-win-core-sysinfo-l1-1-0
GetSystemDirectoryW
GetSystemTimeAsFileTime
api-ms-win-core-libraryloader-l1-2-1
LoadLibraryW
api-ms-win-core-libraryloader-l1-2-0
FreeLibrary
GetProcAddress
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-0
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
UnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
Exports
Exports
AboutDialogProc
ConfigureDialogProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
DriverProc
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ