SfcGetFiles
Static task
static1
Behavioral task
behavioral1
Sample
6d1bd9b6c44240bf8b9e20d1d604bfc0d5c3ebdfb057a162afdad204a92a7482.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6d1bd9b6c44240bf8b9e20d1d604bfc0d5c3ebdfb057a162afdad204a92a7482.dll
Resource
win10v2004-20220812-en
General
-
Target
6d1bd9b6c44240bf8b9e20d1d604bfc0d5c3ebdfb057a162afdad204a92a7482
-
Size
1.5MB
-
MD5
75e4eb37bc648054405cb43f057932a0
-
SHA1
9794d6c944e222abdb13340b4d76485aa20b3726
-
SHA256
6d1bd9b6c44240bf8b9e20d1d604bfc0d5c3ebdfb057a162afdad204a92a7482
-
SHA512
5c302afd5b670d3a886f0700b0f0ef2caadbf57a4b7bd228cbc30211486270a9e1e1e0bae26d6c5da3ad6e7309de051daf50ffdd404d9be7eb42dedfb0001e8c
-
SSDEEP
3072:/1n+pVEZtf78Bo8gaaP3ZoYAfCaaofA3zojjHLylAf+WV98HmJIWFN:/9+pqtfPbaEo1jry2rJ
Malware Config
Signatures
Files
-
6d1bd9b6c44240bf8b9e20d1d604bfc0d5c3ebdfb057a162afdad204a92a7482.dll windows x86
1236a04af442d1a6d4879fce71129519
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetDateFormatA
GetFileAttributesA
GetLocalTime
GetTickCount
GlobalAlloc
GetCurrentProcessId
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
WaitForSingleObject
GetComputerNameA
GetCommandLineA
ExitProcess
EnterCriticalSection
DeleteFileA
CreateThread
CreateProcessA
CreateIoCompletionPort
CreateFileA
CompareStringA
GlobalFree
CloseHandle
advapi32
RegQueryValueExA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
user32
AdjustWindowRectEx
BeginPaint
CascadeWindows
CharNextA
CharUpperBuffA
CopyRect
CreatePopupMenu
MessageBoxA
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 925B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 958B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ