e:\Hackers, instladores\Templates\CABASE\CABASE2\CABASE\Release\CABASE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
83c7cc91c006ee2ff39f51c1990d2820N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83c7cc91c006ee2ff39f51c1990d2820N.dll
Resource
win10v2004-20240802-en
General
-
Target
83c7cc91c006ee2ff39f51c1990d2820N.exe
-
Size
26KB
-
MD5
83c7cc91c006ee2ff39f51c1990d2820
-
SHA1
0795c138b7214e4be9bb62bea7f21ec2a1af7914
-
SHA256
8f93027f8ca6b3d2344e410c484a8b9fa5eb6949b78cba2c791979cd6b9bb8ef
-
SHA512
06064f2e7866fd1b14c302c42346c194560bebb49886927e396264b67de48e86b0e8de4b717eaa4fa056adb9fb01fbbfdadcd6f84a7e652fd9cd50ee158cc063
-
SSDEEP
384:Uh7WV92sBc33Xi54xQOYyTJN5IvetvlmKGgfNmPi66utO4006jo:I7WVQQi3JN5I2t9mKGgfNTpsOVv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83c7cc91c006ee2ff39f51c1990d2820N.exe
Files
-
83c7cc91c006ee2ff39f51c1990d2820N.exe.dll windows:5 windows x86 arch:x86
60e2ad30cf9ccdd37bced7f53322429c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
Sleep
DisableThreadLibraryCalls
GetModuleHandleA
CreateThread
VirtualProtect
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
SetUnhandledExceptionFilter
user32
SetRect
GetAsyncKeyState
GetCursorPos
mouse_event
d3dx9_43
D3DXCreateFontA
msvcr90
_encoded_null
free
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_malloc_crt
_encode_pointer
vsprintf_s
malloc
memset
_decode_pointer
memcpy
Sections
_TEXT Size: 512B - Virtual size: 431B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ