Control_RunDLL
Static task
static1
Behavioral task
behavioral1
Sample
1c879232626726786bd13fbb9e057c6ced088015cb6ac4dc252588ef021a62be.dll
Resource
win7-20241010-en
General
-
Target
1c879232626726786bd13fbb9e057c6ced088015cb6ac4dc252588ef021a62be
-
Size
491KB
-
MD5
135c28828610526e931a6aa015fb1533
-
SHA1
431dd17becd6519f898bd9d55062e77e8298d2b7
-
SHA256
1c879232626726786bd13fbb9e057c6ced088015cb6ac4dc252588ef021a62be
-
SHA512
0159e571f20bd80fe331007588e56f3fe3cac846a7485929985205a87b18ba8e14c614ab5bc9e73da984ad7667111f9bcea2186d401a2057a984d386f2ec4aa4
-
SSDEEP
6144:iC2LiotuWe/fZcV1cwz4NN1O8v6KKImNfm:iC2LdtuWepG1eNkK6jFu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1c879232626726786bd13fbb9e057c6ced088015cb6ac4dc252588ef021a62be
Files
-
1c879232626726786bd13fbb9e057c6ced088015cb6ac4dc252588ef021a62be.dll windows:6 windows x86 arch:x86
263ec39fb76c45b7650e1a58167cfb76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualQuery
FreeLibrary
IsBadReadPtr
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStringTypeW
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
InterlockedExchange
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
EnumSystemLocalesW
VirtualProtect
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
LoadLibraryW
LoadLibraryExW
OutputDebugStringW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
DeleteCriticalSection
GetFileType
GetCurrentThread
VirtualFree
GetNativeSystemInfo
GetProcessHeap
HeapFree
HeapAlloc
SetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
LoadLibraryA
WinExec
VirtualAllocExNuma
GlobalFree
GlobalUnlock
CreateFileA
GlobalLock
GlobalSize
GlobalReAlloc
GlobalAlloc
GetProcAddress
VirtualAlloc
GetCurrentProcess
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetUserDefaultLCID
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetStdHandle
GetModuleFileNameW
GetLastError
InterlockedDecrement
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
HeapSize
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
InterlockedIncrement
CreateFileW
user32
WinHelpA
DefMDIChildProcA
DefFrameProcA
LoadIconA
LoadCursorA
GetParent
MessageBoxA
GetClientRect
SetScrollRange
SetScrollPos
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
UpdateWindow
EnableMenuItem
GetMenu
CharLowerA
CharUpperA
SendDlgItemMessageA
GetDlgItem
EndDialog
DialogBoxParamA
CreateDialogParamA
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExA
RegisterClassA
PostQuitMessage
SendMessageA
DispatchMessageA
TranslateMessage
GetMessageA
wsprintfA
LoadStringA
gdi32
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
DPtoLP
MoveToEx
SetROP2
SetMapMode
SelectPalette
SaveDC
RealizePalette
RestoreDC
Rectangle
LineTo
GetStockObject
DeleteObject
DeleteDC
CreatePen
CreatePalette
CreateDIBitmap
CreateCompatibleDC
BitBlt
SelectObject
comdlg32
GetSaveFileNameA
GetOpenFileNameA
Exports
Exports
Sections
.text Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ