?irrKlangPluginInit@@YGXPAVISoundEngine@irrklang@@PBD@Z
Static task
static1
Behavioral task
behavioral1
Sample
70598f6db3031e6fe3748c3ad3b76ae8b38247eb92cd170ddabd993d70bbf564N.dll
Resource
win7-20240903-en
General
-
Target
70598f6db3031e6fe3748c3ad3b76ae8b38247eb92cd170ddabd993d70bbf564N
-
Size
220KB
-
MD5
3962ccc3fc2d1fbe17603af57ad73330
-
SHA1
3d7598b4d697807262bf56057e444109ad8cd178
-
SHA256
70598f6db3031e6fe3748c3ad3b76ae8b38247eb92cd170ddabd993d70bbf564
-
SHA512
b07ff61ce0d416bb5e0d6e15854b1620ee1b0beb25ef432afd3ce214745e4e115f03bcc6dc334bf463c92f4adceae0c3e900f011f67024b302290a6df4d6ec43
-
SSDEEP
3072:P4vsEahcJAy45zlcEkKE8Ag0FuT0tBzeK8QaEt6yvXw8Sdjva1NiJ:P4taDpLkKdAOU9VBw8aba
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70598f6db3031e6fe3748c3ad3b76ae8b38247eb92cd170ddabd993d70bbf564N
Files
-
70598f6db3031e6fe3748c3ad3b76ae8b38247eb92cd170ddabd993d70bbf564N.dll windows:4 windows x86 arch:x86
36d375e758898d13b9c225d2a3e9fd95
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
Exports
Exports
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE