Static task
static1
Behavioral task
behavioral1
Sample
83946986b28fd8d04d59bab994cd2dc48e83b9711a8f453d8364c2ad27ea0254.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83946986b28fd8d04d59bab994cd2dc48e83b9711a8f453d8364c2ad27ea0254.dll
Resource
win10v2004-20240802-en
General
-
Target
83946986b28fd8d04d59bab994cd2dc48e83b9711a8f453d8364c2ad27ea0254.dll
-
Size
235KB
-
MD5
ba21e11dbaccb64f84191e4f57f137e0
-
SHA1
e5579fadcbc5ae4d68270c1bc59e30ff4c86a842
-
SHA256
83946986b28fd8d04d59bab994cd2dc48e83b9711a8f453d8364c2ad27ea0254
-
SHA512
9c977c3bced61f034b32b57dc51a1f4b998b2c853e6e88fbae32f6634ca85d93fbe45255958f28f26bce9d26e814fbe016961a568aae4af14a0dc7400a86103f
-
SSDEEP
3072:OHcAX/OoMn5VKNn3Awc5AMj+OLQv/muiG2Wr2vMXBuEE:7I0cn3cPj6/JixWr34E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83946986b28fd8d04d59bab994cd2dc48e83b9711a8f453d8364c2ad27ea0254.dll
Files
-
83946986b28fd8d04d59bab994cd2dc48e83b9711a8f453d8364c2ad27ea0254.dll.dll windows:6 windows x86 arch:x86
b120b41ab7cc9378a051406dc87e8fb8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
__p___mb_cur_max
__p__iob
_amsg_exit
_errno
_fileno
_initterm
_lock
_setmode
_unlock
abort
atoi
calloc
exit
fflush
fputc
free
fwrite
localeconv
malloc
memchr
memcpy
memset
realloc
setlocale
signal
strchr
strerror
strlen
strncmp
vfprintf
wcslen
kernel32
DeleteCriticalSection
EnterCriticalSection
GetLastError
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
Exports
Exports
HidD_GetHidGuid
NimMain
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/4 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/18 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/43 Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/66 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/80 Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ