main
Static task
static1
Behavioral task
behavioral1
Sample
b9153c63ae5911dea43344aa7058e14dd2987652423e3178c5cc1e6cad4fc347.dll
Resource
win7-20240903-en
General
-
Target
b9153c63ae5911dea43344aa7058e14dd2987652423e3178c5cc1e6cad4fc347.dll
-
Size
16KB
-
MD5
7d2138c790b086d6f1183e12f21fe861
-
SHA1
7580278b5132bb59159a9fbe5f154092de0f9d0c
-
SHA256
b9153c63ae5911dea43344aa7058e14dd2987652423e3178c5cc1e6cad4fc347
-
SHA512
44946f4f5e30cbe02b2722cd0a63a4dce80841f72a4ba6d897a261658b22027bfe4658968cf1e47ce2bde1a3950c0f30ab823836daefa7b9bf75ec4f9d631827
-
SSDEEP
192:n7KSdtf/wB7vzXDe3mt+D69mdzfYluDDDDDDDDDDDDDDDDDDD+yMsuyK3fBQ2fAi:neUnwB7XV1ddDfBJfA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9153c63ae5911dea43344aa7058e14dd2987652423e3178c5cc1e6cad4fc347.dll
Files
-
b9153c63ae5911dea43344aa7058e14dd2987652423e3178c5cc1e6cad4fc347.dll.dll windows:4 windows x86 arch:x86
b44086fae05fe314dc24df92ecc3d88c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
kernel32
CloseHandle
CreateFileA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
FreeLibrary
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTempFileNameA
GetTempPathA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
ReadFile
SetLastError
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WriteFile
lstrcatA
lstrcpyA
msvcrt
__p__iob
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
realloc
strlen
strncmp
vfprintf
shell32
ShellExecuteA
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ