Static task
static1
Behavioral task
behavioral1
Sample
2bdb45903ec3be2a8d96f3aef13dda2c6b2ecde0e86b8cee56127eda83a8e9ca.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2bdb45903ec3be2a8d96f3aef13dda2c6b2ecde0e86b8cee56127eda83a8e9ca.dll
Resource
win10v2004-20240802-en
General
-
Target
2bdb45903ec3be2a8d96f3aef13dda2c6b2ecde0e86b8cee56127eda83a8e9ca
-
Size
1.7MB
-
MD5
09d696c3d62de70bdcc0c3e737be7dbd
-
SHA1
deff1e25b280dfbc5cae69c369136df6d1e5a517
-
SHA256
2bdb45903ec3be2a8d96f3aef13dda2c6b2ecde0e86b8cee56127eda83a8e9ca
-
SHA512
f6a5d03819991549dc5dfe032b76f2cefc5f0b8549024fee096ed9b17fd916ecffe59709e5c1ac04eebe5a172553b37a7ecb2be1d891aac2be8fb149a561d6b8
-
SSDEEP
24576:Gf//araDHYCyLA3PiJmUDHCZm7X2Je8kuqKg1sruVsKSRzlO1B8CBEscWy:Gf//ar0ysamQ0wzVsKb1mCes
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bdb45903ec3be2a8d96f3aef13dda2c6b2ecde0e86b8cee56127eda83a8e9ca
Files
-
2bdb45903ec3be2a8d96f3aef13dda2c6b2ecde0e86b8cee56127eda83a8e9ca.dll windows:5 windows x86 arch:x86
f9194deb730b0183e11b3f8a33490470
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
setupapi
SetupDiSetDeviceRegistryPropertyW
shlwapi
SHDeleteValueA
ntdsapi
DsCrackNamesW
user32
CloseDesktop
GetWindowLongA
mprapi
MprAdminServerDisconnect
msvcrt
wcstol
kernel32
InterlockedPushEntrySList
QueryPerformanceCounter
GetNumberFormatW
GetSystemTimeAsFileTime
GetModuleHandleW
GetFileTime
CopyFileW
OutputDebugStringA
LoadLibraryExA
advapi32
GetCurrentHwProfileA
ole32
CreateDataAdviseHolder
OleCreateEmbeddingHelper
CoGetCallContext
winscard
SCardEndTransaction
ws2_32
WSAGetLastError
Sections
.text Size: 388KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.crt1 Size: 892KB - Virtual size: 889KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 288KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bI6k Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 864B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ