Static task
static1
Behavioral task
behavioral1
Sample
287392425199412cc7e9ead557c1b4d1516511f884774cfd0f79feb1300c5d57.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
287392425199412cc7e9ead557c1b4d1516511f884774cfd0f79feb1300c5d57.dll
Resource
win10v2004-20220414-en
General
-
Target
287392425199412cc7e9ead557c1b4d1516511f884774cfd0f79feb1300c5d57
-
Size
110KB
-
MD5
76feaf6e14049057bdfc1606421a2350
-
SHA1
4df6ea142b356257f9960d6bacda3be20a49df5f
-
SHA256
287392425199412cc7e9ead557c1b4d1516511f884774cfd0f79feb1300c5d57
-
SHA512
21fe9f07f4fee39150376a43332395fd1238384ae1361248a17ae0a33313e216593eb1aefec4621c69b4ef1bc21f1110bb367fea10720cf4ebb884ab83d907fd
-
SSDEEP
3072:9rHHe1bu+VaQsFEyyLtiIpTc/cxPt5bOiCpU:9bibrV7MEbti+Tc/mPXOT
Malware Config
Signatures
Files
-
287392425199412cc7e9ead557c1b4d1516511f884774cfd0f79feb1300c5d57.dll windows x86
d1230df91ec837dd4d002257ed3223f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetCurrentProcessId
GetACP
CloseHandle
user32
SendMessageA
CharLowerA
gdi32
AddFontMemResourceEx
AbortPath
AnimatePalette
BeginPath
AngleArc
winspool.drv
ClosePrinter
winmm
PlaySoundA
msvcrt
exit
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss1 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ