Static task
static1
Behavioral task
behavioral1
Sample
c5daa02d5074a38b57ed0548fd832100N.dll
Resource
win7-20240705-en
General
-
Target
c5daa02d5074a38b57ed0548fd832100N.exe
-
Size
6.4MB
-
MD5
c5daa02d5074a38b57ed0548fd832100
-
SHA1
78eed823c60b39239e0aca7ca9549c3a86d38f8a
-
SHA256
0896c0ec12034844cf44a04e88d2980cbc25ca66463b2b69d0231df0208a1d35
-
SHA512
126e99c1a53ffc5bc076e3ec53391e74031688ed92030c745e54cbe734d382041f7b1ac67ecdeb67cb137c1dbf3310b59a9e9d18ae6ed37d728ffa025f820f55
-
SSDEEP
196608:NALWWTrsVGr/66OqnB/SYzGWM4cfAYmA:SnTr6GrhFS+uflm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5daa02d5074a38b57ed0548fd832100N.exe
Files
-
c5daa02d5074a38b57ed0548fd832100N.exe.dll windows:6 windows x86 arch:x86
a8b654027f1fc6b9f0bd7b8690c630bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryW
IsValidLocale
Sleep
SizeofResource
FormatMessageW
GetFileAttributesA
GetExitCodeProcess
CreateProcessA
TerminateProcess
FileTimeToSystemTime
GetOverlappedResult
GetTempPathW
RaiseException
SetThreadLocale
FindFirstFileA
GetThreadLocale
IsValidCodePage
EnterCriticalSection
FindClose
LoadLibraryA
CreateFileMappingA
GetFileType
CreateEventW
QueryDosDeviceW
DeviceIoControl
GetModuleFileNameA
GetThreadPriority
GetStringTypeW
TlsSetValue
LocalFree
ResumeThread
lstrcpyW
ExpandEnvironmentStringsW
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
LoadLibraryExW
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameW
WriteFile
GetStdHandle
GetProcessHeap
HeapSize
GetProcessTimes
SetCommTimeouts
ClearCommBreak
GetWindowsDirectoryA
ExpandEnvironmentStringsA
GetTickCount
WaitForSingleObjectEx
GetFullPathNameW
GetLogicalDrives
GetModuleHandleExW
VerSetConditionMask
SystemTimeToFileTime
SetDllDirectoryW
SystemTimeToTzSpecificLocalTime
SetEndOfFile
GetCPInfo
GetDriveTypeW
UnmapViewOfFile
TlsGetValue
SetFilePointer
GetFileSize
EnumResourceNamesW
EncodePointer
DeleteCriticalSection
ExitProcess
GetOEMCP
GetACP
IsDebuggerPresent
EnumSystemLocalesW
GetUserDefaultLCID
GetLocaleInfoW
LCMapStringW
WideCharToMultiByte
LeaveCriticalSection
DecodePointer
MultiByteToWideChar
GetSystemTimeAsFileTime
GetLastError
HeapReAlloc
HeapFree
RtlUnwind
HeapAlloc
GetCommandLineA
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TlsAlloc
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
user32
SetWindowLongW
ClientToScreen
RegisterWindowMessageW
DrawIconEx
DrawTextExW
EnumWindows
GetDC
GetWindow
GetMenu
MonitorFromWindow
DrawFocusRect
DestroyCursor
SendDlgItemMessageW
GetDesktopWindow
GetSysColorBrush
DrawMenuBar
MessageBoxW
MapWindowPoints
GetDlgCtrlID
SetWindowTextW
CopyRect
GetWindowThreadProcessId
gdi32
PolyPolygon
ExtFloodFill
Polygon
GetEnhMetaFileHeader
GetRegionData
CombineRgn
RectInRegion
StretchDIBits
SetViewportExtEx
SetROP2
StretchBlt
comdlg32
GetOpenFileNameW
advapi32
RegSetValueExW
RegCloseKey
AdjustTokenPrivileges
SetSecurityDescriptorOwner
RegConnectRegistryW
LookupPrivilegeValueW
SetSecurityDescriptorDacl
RegQueryValueExW
OpenSCManagerW
CloseServiceHandle
shell32
CommandLineToArgvW
ole32
CoTaskMemFree
oleaut32
SafeArrayGetUBound
SysFreeString
SafeArrayPtrOfIndex
SafeArrayCreate
VariantClear
Sections
.text Size: 494KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ