Static task
static1
Behavioral task
behavioral1
Sample
55faad2da5f429945f45451e021290f8c19b424701210b99160a04f61955128cN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
55faad2da5f429945f45451e021290f8c19b424701210b99160a04f61955128cN.dll
Resource
win10v2004-20240802-en
General
-
Target
55faad2da5f429945f45451e021290f8c19b424701210b99160a04f61955128cN
-
Size
120KB
-
MD5
f42466182c5459b4633df35b21a3d460
-
SHA1
6ca5198492bef57f991c636a8c959dda93ad2397
-
SHA256
55faad2da5f429945f45451e021290f8c19b424701210b99160a04f61955128c
-
SHA512
c2c7e8ff7e87f3d5046b4ec388edc9591834c072e8393230f5306b8893b20737df631979bd4b713222c1b06f873c8f3c96bdd1c825bb3207127a2b224ae6023c
-
SSDEEP
3072:Gr1W7FgUF6prcVrTtnUx1Kq6J4Im4zm3c1vHVEDOiDf1xu6rb8J:Gr1ox6prETtucnJ/N5Ha9Pu+bw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55faad2da5f429945f45451e021290f8c19b424701210b99160a04f61955128cN
Files
-
55faad2da5f429945f45451e021290f8c19b424701210b99160a04f61955128cN.dll windows:4 windows x86 arch:x86
b3182ef6763c8caa8364bacaa9eeaaea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord815
ord5307
ord561
ord825
ord823
ord800
ord939
ord2818
ord540
ord860
ord861
ord539
ord1572
ord600
ord826
ord269
ord6467
ord1255
ord1253
ord1570
ord1197
ord1243
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord4486
ord2554
ord6375
ord1205
ord4274
ord342
ord1182
ord1116
ord1176
ord1575
ord1168
ord1577
ord1578
msvcrt
_CxxThrowException
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
_onexit
__dllonexit
__CxxFrameHandler
wcslen
kernel32
LocalFree
MultiByteToWideChar
GetLastError
FormatMessageA
lstrlenA
LocalAlloc
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedDecrement
WideCharToMultiByte
user32
wsprintfA
ole32
OleRun
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
oleaut32
SysAllocString
SafeArrayCreate
VariantChangeType
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString
VariantInit
VariantCopy
VariantClear
GetErrorInfo
Sections
.data Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE