Static task
static1
Behavioral task
behavioral1
Sample
79e7ef49318a8c7695cd140a2ca12b746139ba797d6f82f90cca4a9927f9c005.dll
Resource
win7-20220310-en
General
-
Target
79e7ef49318a8c7695cd140a2ca12b746139ba797d6f82f90cca4a9927f9c005
-
Size
2.4MB
-
MD5
536f997a1c7a56725d0fe6ffa733d03a
-
SHA1
54999683199025f577444202c122d0f77b0a0b3f
-
SHA256
79e7ef49318a8c7695cd140a2ca12b746139ba797d6f82f90cca4a9927f9c005
-
SHA512
6b6e6af31feddcafef7acefd1eb3bd7c2df99a62ddef02816b6789536aac88ab0a98f29edcd249f532c5302605f762c6a40430959bd3ce67745af46afb47080b
Malware Config
Signatures
Files
-
79e7ef49318a8c7695cd140a2ca12b746139ba797d6f82f90cca4a9927f9c005.dll windows x86
9dca1f62bdefdbab5e439758eac8b160
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
SetLastError
LoadResource
CloseHandle
GetModuleFileNameA
UnmapViewOfFile
FlushFileBuffers
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetCPInfo
SetStdHandle
GetOEMCP
GetACP
GetSystemInfo
VirtualProtect
Sleep
GetLastError
VirtualAlloc
user32
LoadIconA
gdi32
GetEnhMetaFileW
GetStockObject
AddFontResourceA
RealizePalette
GetEnhMetaFileBits
advapi32
RegOpenKeyA
shlwapi
PathIsUNCW
PathIsRelativeW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ