SfcGetFiles
Static task
static1
Behavioral task
behavioral1
Sample
cb6e1c0cfd3047fb9405ac51ceb9a4fdca5be3c7db3b75eebf0dd78c9551790b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb6e1c0cfd3047fb9405ac51ceb9a4fdca5be3c7db3b75eebf0dd78c9551790b.dll
Resource
win10v2004-20220812-en
General
-
Target
cb6e1c0cfd3047fb9405ac51ceb9a4fdca5be3c7db3b75eebf0dd78c9551790b
-
Size
1.5MB
-
MD5
59c617fa406a1f8692304bf268acbb12
-
SHA1
763f2f0a41dea60d1d9755e65fec37d57e3f39a7
-
SHA256
cb6e1c0cfd3047fb9405ac51ceb9a4fdca5be3c7db3b75eebf0dd78c9551790b
-
SHA512
e0668bbb39e55366b6c78e0e9fea695d9f0465802fb4746d11ebf6cfc2657c210c92810d6c1f2f892bfe06bb2c2a607e46474783501aafa6852e886ff673e216
-
SSDEEP
3072:OKv7e2ebH/3BqKzEvqYW5GJ8KUYwvioGm2HK9IcVevaC+7SRNm:OKvMtwW5GJ5oPFIUB7S
Malware Config
Signatures
Files
-
cb6e1c0cfd3047fb9405ac51ceb9a4fdca5be3c7db3b75eebf0dd78c9551790b.dll windows x86
5a2238d9fde38ffac8fd684070cf6416
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
CreateThread
DeleteFileA
FormatMessageA
GetCommandLineA
GetComputerNameA
GetCurrentThreadId
GetFileSize
GetLastError
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalUnlock
LoadLibraryA
LocalAlloc
MulDiv
ReadFile
ResumeThread
SetCurrentDirectoryA
SetEvent
Sleep
VirtualAlloc
WaitForSingleObject
WideCharToMultiByte
lstrcatA
lstrlenA
user32
CharUpperBuffW
ClientToScreen
CreateWindowExW
DestroyWindow
EndPaint
GetMenuItemCount
GetScrollInfo
InsertMenuItemW
IntersectRect
InvalidateRect
IsWindow
OffsetRect
PeekMessageW
SetActiveWindow
SetTimer
SetWindowLongW
ShowWindow
SubtractRect
TrackPopupMenu
TranslateMessage
WindowFromPoint
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ