Static task
static1
Behavioral task
behavioral1
Sample
c068663737617f98cbae98a6684d37ebeae26f5951ce9665bb8ad46e267ec652N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c068663737617f98cbae98a6684d37ebeae26f5951ce9665bb8ad46e267ec652N.dll
Resource
win10v2004-20240802-en
General
-
Target
c068663737617f98cbae98a6684d37ebeae26f5951ce9665bb8ad46e267ec652N.exe
-
Size
6.4MB
-
MD5
e760489d88792069c348f5c7834a38c0
-
SHA1
94cde57f929115d42c749c369587836d17feb82e
-
SHA256
c068663737617f98cbae98a6684d37ebeae26f5951ce9665bb8ad46e267ec652
-
SHA512
c5d7f48cd9c90d685aea732d6f7f6c9176dd4acfd1d02d0674653ba9f1fd3fade338b47db04b7829aa9aa445c4e7e59e88686ed601188346bdb4a8fa28a3b4a5
-
SSDEEP
196608:MI0v8qZDCype5n2yK/gpqw7kDMH5AKwXFau61:MIw8AmypeVK/Rw7yMH5Z6Qu6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c068663737617f98cbae98a6684d37ebeae26f5951ce9665bb8ad46e267ec652N.exe
Files
-
c068663737617f98cbae98a6684d37ebeae26f5951ce9665bb8ad46e267ec652N.exe.dll windows:6 windows x86 arch:x86
9f82e09d258043983ced2ecadbdaff67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FindResourceW
FreeLibrary
SystemTimeToFileTime
QueryPerformanceCounter
GetCommandLineA
SetCommTimeouts
LoadLibraryW
IsValidLocale
TerminateProcess
MultiByteToWideChar
GetTempPathW
GetCPInfoExW
EnterCriticalSection
ResetEvent
GetFileType
CreateEventW
RemoveDirectoryW
GetThreadPriority
GetWindowsDirectoryW
LocalFree
DeleteFileA
SwitchToThread
GetSystemDefaultUILanguage
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
GetModuleFileNameW
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameA
GetStdHandle
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileW
GetTempFileNameW
EnumResourceTypesW
CreatePipe
LockResource
GetLocalTime
VerifyVersionInfoW
GetPrivateProfileIntW
ExitThread
HeapCreate
GetTimeZoneInformation
GetProcessTimes
InitializeCriticalSectionAndSpinCount
ExitProcess
GetUserDefaultLangID
GetSystemTimeAsFileTime
SignalObjectAndWait
LoadLibraryExW
SetEndOfFile
VirtualQuery
EnumResourceNamesW
IsDebuggerPresent
GetProcessHeap
HeapSize
GetModuleHandleExW
EnumSystemLocalesW
GetUserDefaultLCID
GetLocaleInfoW
WideCharToMultiByte
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetStringTypeW
GetLastError
HeapReAlloc
RaiseException
HeapFree
RtlUnwind
GetCurrentThreadId
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
Sleep
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
LCMapStringW
user32
GetSubMenu
InflateRect
CheckMenuRadioItem
LoadMenuW
DrawStateW
CharUpperBuffW
GetDlgItemInt
ValidateRgn
EndMenu
GetDlgCtrlID
DestroyIcon
GetMonitorInfoW
EndPaint
ClientToScreen
AttachThreadInput
GetMenuStringW
GetDC
GetWindowLongW
GetDesktopWindow
GetMenuItemCount
DestroyMenu
SetWindowLongW
gdi32
ExtFloodFill
SetWindowExtEx
CreateHatchBrush
CombineRgn
RectInRegion
StretchDIBits
CreateBitmapIndirect
GetObjectW
SetStretchBltMode
CreateEnhMetaFileW
comdlg32
GetOpenFileNameW
advapi32
RegConnectRegistryW
AdjustTokenPrivileges
RegSetKeySecurity
RegDeleteValueA
ChangeServiceConfigW
OpenSCManagerW
CloseServiceHandle
RegEnumKeyExW
shell32
ExtractIconExW
Shell_NotifyIconW
ShellExecuteW
SHGetFileInfoW
oleaut32
VariantChangeType
SafeArrayGetLBound
Sections
.text Size: 509KB - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ