DriverProc
Static task
static1
Behavioral task
behavioral1
Sample
4ceb703380f193a1708c2bef13c6e3d00b48677d7cbf7f9a785f8e90d93664f3.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4ceb703380f193a1708c2bef13c6e3d00b48677d7cbf7f9a785f8e90d93664f3.dll
Resource
win10v2004-20241007-en
General
-
Target
4ceb703380f193a1708c2bef13c6e3d00b48677d7cbf7f9a785f8e90d93664f3
-
Size
52KB
-
MD5
6a523543bcba88224756999dc9544c92
-
SHA1
d449eb3c6d180a93fae01831bbe41f17694d2ee1
-
SHA256
4ceb703380f193a1708c2bef13c6e3d00b48677d7cbf7f9a785f8e90d93664f3
-
SHA512
998abe9dc8ccae48ce4bfff3b74657d0131e63aace96ae6452d25b9eb939ae6b5ae96ea70750f905e9823c0c9e097c7368db284ff0a1e702dda626ae60439d20
-
SSDEEP
768:u377U+kJYVmezpRirNnk9Oyvd3laG103MZ6mcVQj0b/jDP4v0jZKZj81fhImlkIf:o77U/JYIIa73MnOhIAkIjZqm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ceb703380f193a1708c2bef13c6e3d00b48677d7cbf7f9a785f8e90d93664f3
Files
-
4ceb703380f193a1708c2bef13c6e3d00b48677d7cbf7f9a785f8e90d93664f3.dll windows:5 windows x86 arch:x86
8d66ecef88fd4a0df7e1722567be463f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntdll
vDbgPrintExWithPrefix
kernel32
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetLastError
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LocalAlloc
LocalFree
LocalReAlloc
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
_vsnprintf
abort
bsearch
calloc
free
fwrite
malloc
memcmp
memmove
sprintf
strchr
strcmp
strcpy
strcspn
strncmp
vfprintf
user32
LoadStringW
Exports
Exports
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 25KB - Virtual size: 24KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ