Control_RunDLL
Static task
static1
Behavioral task
behavioral1
Sample
995b0be1d1d6d105fdcea9a78638b13e45b8153330615146c854056b415490a7.dll
Resource
win7-20240903-en
General
-
Target
995b0be1d1d6d105fdcea9a78638b13e45b8153330615146c854056b415490a7
-
Size
491KB
-
MD5
e485d171c0882c2fd627c1cb699ebd9f
-
SHA1
11c824df9f79f7f22cf10d64eadced2eeb7f36b3
-
SHA256
995b0be1d1d6d105fdcea9a78638b13e45b8153330615146c854056b415490a7
-
SHA512
bb2fd30f54cc6ff2ff43bacc94a16d4fbc3f77e268583770aebe090f560dd1e86977b79011e1455c5215809a8c60fb1516bef19ec6e0c80e5b9ec119ef0c6eed
-
SSDEEP
6144:iC2LiotuWe/fncV1cwz4NN1O8v6KKImNfm:iC2LdtuWe3G1eNkK6jFu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 995b0be1d1d6d105fdcea9a78638b13e45b8153330615146c854056b415490a7
Files
-
995b0be1d1d6d105fdcea9a78638b13e45b8153330615146c854056b415490a7.dll windows:6 windows x86 arch:x86
263ec39fb76c45b7650e1a58167cfb76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualQuery
FreeLibrary
IsBadReadPtr
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStringTypeW
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
InterlockedExchange
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
EnumSystemLocalesW
VirtualProtect
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
LoadLibraryW
LoadLibraryExW
OutputDebugStringW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
DeleteCriticalSection
GetFileType
GetCurrentThread
VirtualFree
GetNativeSystemInfo
GetProcessHeap
HeapFree
HeapAlloc
SetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
LoadLibraryA
WinExec
VirtualAllocExNuma
GlobalFree
GlobalUnlock
CreateFileA
GlobalLock
GlobalSize
GlobalReAlloc
GlobalAlloc
GetProcAddress
VirtualAlloc
GetCurrentProcess
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetUserDefaultLCID
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetStdHandle
GetModuleFileNameW
GetLastError
InterlockedDecrement
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
HeapSize
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
InterlockedIncrement
CreateFileW
user32
WinHelpA
DefMDIChildProcA
DefFrameProcA
LoadIconA
LoadCursorA
GetParent
MessageBoxA
GetClientRect
SetScrollRange
SetScrollPos
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
UpdateWindow
EnableMenuItem
GetMenu
CharLowerA
CharUpperA
SendDlgItemMessageA
GetDlgItem
EndDialog
DialogBoxParamA
CreateDialogParamA
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExA
RegisterClassA
PostQuitMessage
SendMessageA
DispatchMessageA
TranslateMessage
GetMessageA
wsprintfA
LoadStringA
gdi32
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
DPtoLP
MoveToEx
SetROP2
SetMapMode
SelectPalette
SaveDC
RealizePalette
RestoreDC
Rectangle
LineTo
GetStockObject
DeleteObject
DeleteDC
CreatePen
CreatePalette
CreateDIBitmap
CreateCompatibleDC
BitBlt
SelectObject
comdlg32
GetSaveFileNameA
GetOpenFileNameA
Exports
Exports
Sections
.text Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ