Static task
static1
Behavioral task
behavioral1
Sample
ca3c139a8c4566f3028296ef2af65d52b8e25090e79ac86ca23c426b987d7eca.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ca3c139a8c4566f3028296ef2af65d52b8e25090e79ac86ca23c426b987d7eca.dll
Resource
win10v2004-20240802-en
General
-
Target
ca3c139a8c4566f3028296ef2af65d52b8e25090e79ac86ca23c426b987d7eca
-
Size
854KB
-
MD5
6e741b98241da6906fc3c73800975ef0
-
SHA1
57964905b26cdade31cba06afd3e6bf8f2045173
-
SHA256
ca3c139a8c4566f3028296ef2af65d52b8e25090e79ac86ca23c426b987d7eca
-
SHA512
d9f29e342bf1ddc250d6c87471b0fd350d9d2d58ebcd16a215de960acca167fecccdfc48d016e5a457d14f1d521fcd7802def236209b2daf0c9348e25b0ced21
-
SSDEEP
768:eV1cEy9l3Hs503mJShtGnTED4iT3vyR0ZMeSNCTD/6kpLRmNMjxW7lDE:61QLWAmTiuQSNCnTpLsMEd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca3c139a8c4566f3028296ef2af65d52b8e25090e79ac86ca23c426b987d7eca
Files
-
ca3c139a8c4566f3028296ef2af65d52b8e25090e79ac86ca23c426b987d7eca.dll windows:5 windows x86 arch:x86
f5c806fef0d90ddc72e21dba2a5e19eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
GetProcAddress
LoadLibraryA
GetLastError
GetFileAttributesA
GetCurrentThreadId
DecodePointer
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 503KB - Virtual size: 506KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.shell Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ