lawAsystem.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ef1589de36e4b4000fb1479c4404a94bcf9d872023d2d334b8c952bfd625c1e8N.dll
Resource
win7-20240708-en
General
-
Target
ef1589de36e4b4000fb1479c4404a94bcf9d872023d2d334b8c952bfd625c1e8N
-
Size
141KB
-
MD5
01ef8d188d5adfd338cae89b8e7afd40
-
SHA1
8c915c760eb8ae01a825203961ad10816cd1d2f9
-
SHA256
ef1589de36e4b4000fb1479c4404a94bcf9d872023d2d334b8c952bfd625c1e8
-
SHA512
e0ab65ef24e5d5fd92a03511b74c5faab375c3dcbf76b0c1f04e69b59a330eafaeaf0e3b6de9bc0acdf1b851614a7021a037454c016aa0741dd78f07a1ff8d4d
-
SSDEEP
1536:NHzpGegywg7CFuI1sV96u8zDfZcBuW8nNZ7+W6HrDwEqj8Ye:F9GtDjwI1huoDRwiznwS8Ye
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef1589de36e4b4000fb1479c4404a94bcf9d872023d2d334b8c952bfd625c1e8N
Files
-
ef1589de36e4b4000fb1479c4404a94bcf9d872023d2d334b8c952bfd625c1e8N.dll windows:4 windows x86 arch:x86
82310ff3af85d5e13f5a09f860ab131e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
_lwrite
IsValidLanguageGroup
GetProcessHeap
GetProcessIoCounters
WriteConsoleOutputCharacterA
MoveFileExA
SetEvent
GlobalFree
SetInformationJobObject
BindIoCompletionCallback
VirtualAlloc
GetCalendarInfoW
GetCurrencyFormatW
EnumCalendarInfoW
EnumSystemLanguageGroupsW
FindVolumeMountPointClose
lstrcpyA
FillConsoleOutputCharacterW
CreateThread
FindNextVolumeMountPointA
CreateSemaphoreA
SleepEx
AssignProcessToJobObject
lstrcmpW
GetWindowsDirectoryA
GlobalFlags
lstrcatA
GetLocaleInfoW
SetConsoleWindowInfo
CloseHandle
lstrlenA
CompareFileTime
lstrlenA
msvcrt
memcpy
strlen
advapi32
FindFirstFreeAce
InitiateSystemShutdownExW
CreatePrivateObjectSecurityEx
CryptDeriveKey
Exports
Exports
PseudocodeEncodingClass
PseudocodeKeyboard
PseudocodeProgramming
PseudocodeVersionFinder
PseudocodeWidgetSubdirectory
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ