c:\rise\Window\position\Character\opposite\Miss\lawCome.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1f37c2f248055cb841d03dfdf70260f3b16723476c4dde4c73e3fcca8e33f9c3.dll
Resource
win7-20240708-en
General
-
Target
1f37c2f248055cb841d03dfdf70260f3b16723476c4dde4c73e3fcca8e33f9c3
-
Size
306KB
-
MD5
78d273e063049f495d057ba68aa46338
-
SHA1
1c3bd35dd430c10a4dd2e188ebad12cc85b6fa63
-
SHA256
1f37c2f248055cb841d03dfdf70260f3b16723476c4dde4c73e3fcca8e33f9c3
-
SHA512
59a11efe9e5350c606f87008c22ec549855454e8f0012218f59cdd52e8511683c6ea370462c81359013b54fbd4511da013d9fb3375deabd117bdab6c64914c7e
-
SSDEEP
6144:98N8Nsk2wmMtAH6xX5F2G2z/wbca+kO2:9EhkcMtA05F2G2zIxY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f37c2f248055cb841d03dfdf70260f3b16723476c4dde4c73e3fcca8e33f9c3
Files
-
1f37c2f248055cb841d03dfdf70260f3b16723476c4dde4c73e3fcca8e33f9c3.dll windows:5 windows x86 arch:x86
01e923b88bbf8874d1a48732f2e619bb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetWindowsDirectoryA
Sleep
CreateSemaphoreA
GetProcAddress
VirtualProtectEx
LoadLibraryA
GetCurrentDirectoryA
GetCurrentThreadId
HeapSize
GetLocaleInfoA
HeapAlloc
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetLastError
CompareStringA
MultiByteToWideChar
CompareStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
DestroyWindow
SendDlgItemMessageA
SetForegroundWindow
SendMessageA
GetClipboardData
CheckRadioButton
SetClipboardData
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 15.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ