fill_data
Static task
static1
Behavioral task
behavioral1
Sample
648f7aeac068f3fabda5ce6a0e56b149c430fe53d9bd2eb3dad330c04087ed90.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
648f7aeac068f3fabda5ce6a0e56b149c430fe53d9bd2eb3dad330c04087ed90.dll
Resource
win10v2004-20240802-en
General
-
Target
648f7aeac068f3fabda5ce6a0e56b149c430fe53d9bd2eb3dad330c04087ed90
-
Size
146KB
-
MD5
ae2bb59ce889ed99acdc3d0fd8cbbcb2
-
SHA1
0b562ccb23186e8b0168da660715dab0818a179c
-
SHA256
648f7aeac068f3fabda5ce6a0e56b149c430fe53d9bd2eb3dad330c04087ed90
-
SHA512
6743bb5880ffb85bb9b8301906cfd8411d050a3d5f9ea7d0c83328e62d50de97a83dc81554456de63d493f5fdda09ced30c15fd9b096d0980604f82857fc5736
-
SSDEEP
3072:xMv3iFcvTKpRTIU+sO5Milnhrg2wlT91+QOZlCAmq:xiy8TKpaSCMinjjlCLq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 648f7aeac068f3fabda5ce6a0e56b149c430fe53d9bd2eb3dad330c04087ed90
Files
-
648f7aeac068f3fabda5ce6a0e56b149c430fe53d9bd2eb3dad330c04087ed90.dll windows:6 windows x64 arch:x64
5c755d035b8efe9911957ee45d7403ed
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
user32
MessageBoxA
ole32
CoUninitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantClear
winhttp
WinHttpOpen
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpReadData
WinHttpConnect
shell32
SHGetFolderPathA
advapi32
CryptHashData
CryptCreateHash
CryptDecrypt
CryptDestroyKey
CryptDeriveKey
CryptReleaseContext
CryptAcquireContextW
CryptDestroyHash
kernel32
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
CreateFileW
GetStringTypeW
HeapSize
HeapReAlloc
SetEndOfFile
WriteConsoleW
GetCommandLineA
GetLastError
WaitForSingleObject
CreateThread
GlobalMemoryStatusEx
VirtualAlloc
VirtualProtect
MultiByteToWideChar
WideCharToMultiByte
LocalFree
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetFileSizeEx
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
LCMapStringW
GetStdHandle
GetFileType
CloseHandle
GetConsoleMode
ReadConsoleW
SetFilePointerEx
WriteFile
GetConsoleOutputCP
Exports
Exports
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ