Static task
static1
Behavioral task
behavioral1
Sample
568d80d96092c02298865fcf63325300fe64fc12edafcc710e4f9b931ac5e0ee.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
568d80d96092c02298865fcf63325300fe64fc12edafcc710e4f9b931ac5e0ee.dll
Resource
win10v2004-20220812-en
General
-
Target
568d80d96092c02298865fcf63325300fe64fc12edafcc710e4f9b931ac5e0ee
-
Size
470KB
-
MD5
e7a7022c99bec040e3cd7ccc98316c45
-
SHA1
89ef5577e56107476ebef7a8977980b5b30e0815
-
SHA256
568d80d96092c02298865fcf63325300fe64fc12edafcc710e4f9b931ac5e0ee
-
SHA512
afafffa15d4979a44a42a647e5f8d034d249ef4ae0e5af4e5798d3686e390092f7e273adf937c823035faef57e564b2ad2b8cdc7109eb03f52d5f56cc3796df4
-
SSDEEP
12288:4+SkwAfQscNZWYapLT7z9OBHClcSI9uKhFg3lHFAg:4N8QBslF7zgBil8FF
Malware Config
Signatures
Files
-
568d80d96092c02298865fcf63325300fe64fc12edafcc710e4f9b931ac5e0ee.dll windows x86
f95c3d489bb12bcbac4bf2fe9e9a9ceb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
Sections
CODE Size: 459KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE