CAMate
Static task
static1
Behavioral task
behavioral1
Sample
6ab895b3ab84c1951ecfd8b0bd2c0ebf027cc044470512c33f3f2cd9b5e79e0aN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6ab895b3ab84c1951ecfd8b0bd2c0ebf027cc044470512c33f3f2cd9b5e79e0aN.dll
Resource
win10v2004-20240802-en
General
-
Target
6ab895b3ab84c1951ecfd8b0bd2c0ebf027cc044470512c33f3f2cd9b5e79e0aN
-
Size
28KB
-
MD5
0bf9f9b592d9fcbcadea52c14f2176d0
-
SHA1
1dce61de86aa01f2064aac70b1bb9b49f6ccecf6
-
SHA256
6ab895b3ab84c1951ecfd8b0bd2c0ebf027cc044470512c33f3f2cd9b5e79e0a
-
SHA512
5fdc31426c50a0186973052c532c9040e398d5059f9fb6eb1ac60ac81fb5aa24af6a4e41de1b6cb20a7ed4b3b5c064c9945db7edbc5089b93a2cb810ca715cf0
-
SSDEEP
384:oRJrQ0pTuU2z0uHeg8EmlsupyxqKJUo8toIo9DII:P0pTuUqJH6TKJNfIo9UI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ab895b3ab84c1951ecfd8b0bd2c0ebf027cc044470512c33f3f2cd9b5e79e0aN
Files
-
6ab895b3ab84c1951ecfd8b0bd2c0ebf027cc044470512c33f3f2cd9b5e79e0aN.dll windows:4 windows x86 arch:x86
28c9c9c1325929e27c3f57909cd602d1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
Beep
GetACP
GetCPInfo
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetStringTypeW
RtlUnwind
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
user32
MessageBoxA
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ