Static task
static1
Behavioral task
behavioral1
Sample
c923925934cc19bff35b7333e41a61c2d1481123f318cf419a1f744222432623N.dll
Resource
win7-20240729-en
General
-
Target
c923925934cc19bff35b7333e41a61c2d1481123f318cf419a1f744222432623N
-
Size
1.2MB
-
MD5
f039b01ec6f5ef7ca7489476072d83d0
-
SHA1
acf4f45c4504c5631043f40c5979c588f8640c39
-
SHA256
c923925934cc19bff35b7333e41a61c2d1481123f318cf419a1f744222432623
-
SHA512
b057f19d21c3246c7141bef4b115d9ee17f587d4ae0b3c9e06a1b98f6b702f0ca84eff4047bfd93d77327539443dc963ac59563fb584ba8372319d01b8a3a8dc
-
SSDEEP
24576:fx3dNYhrlWroUGw4yYm0gUr6QZoQMdlwZFSQvrEH7v:p3d6hRW0tw4+0gw6QZoQMdlwZFST
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c923925934cc19bff35b7333e41a61c2d1481123f318cf419a1f744222432623N
Files
-
c923925934cc19bff35b7333e41a61c2d1481123f318cf419a1f744222432623N.dll windows:6 windows x86 arch:x86
dc8fcb6bf84bad43ea7882cd4e5a8d7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ