DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
846cd2a3e425cfec72b0e490e71026ec8cd3c9ebf3bb15362d8235761074f49e.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
846cd2a3e425cfec72b0e490e71026ec8cd3c9ebf3bb15362d8235761074f49e.dll
Resource
win10v2004-20240802-en
General
-
Target
846cd2a3e425cfec72b0e490e71026ec8cd3c9ebf3bb15362d8235761074f49e
-
Size
316KB
-
MD5
f99adab7b2560097119077b99aceb40d
-
SHA1
19af79ee38e4c1f8310a21126890bfdf9d1e82fd
-
SHA256
846cd2a3e425cfec72b0e490e71026ec8cd3c9ebf3bb15362d8235761074f49e
-
SHA512
f740605df1a8c939002301f2d040ca75f70776f4c364bf4032356aa6cf8c2096b47d587d8750f268d9c7874b24314dddc11200e25c2f3e28c843c84d9c9cb46d
-
SSDEEP
6144:RQHfV8RPPoTRqaP106MLDXfht5UyhBp6dfrsGwHlmBVyum:QV8hPoTrtn4ta4wFwFmBVyD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 846cd2a3e425cfec72b0e490e71026ec8cd3c9ebf3bb15362d8235761074f49e
Files
-
846cd2a3e425cfec72b0e490e71026ec8cd3c9ebf3bb15362d8235761074f49e.dll regsvr32 windows:4 windows x86 arch:x86
29b5523b03aa0e9b8b79f9aebb216f28
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeA
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
VirtualProtect
GetSystemInfo
VirtualQuery
GetACP
GetOEMCP
SetStdHandle
ReadFile
GetLocaleInfoW
SetFileAttributesA
LoadLibraryA
VirtualAlloc
GetVersionExA
GetProcAddress
CloseHandle
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
HeapFree
ExitProcess
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
GetCPInfo
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
TerminateProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ