SfcGetFiles
Static task
static1
Behavioral task
behavioral1
Sample
bdd4e9e6618709e15d4101f02e5ee51adbc3b414e191be42699be37bec3abe04.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdd4e9e6618709e15d4101f02e5ee51adbc3b414e191be42699be37bec3abe04.dll
Resource
win10v2004-20220812-en
General
-
Target
bdd4e9e6618709e15d4101f02e5ee51adbc3b414e191be42699be37bec3abe04
-
Size
1.5MB
-
MD5
9d06dc5279a424f462b85df0fd03982d
-
SHA1
5408ba35c7b0b433ac4eaf09d69baf709a80eaa8
-
SHA256
bdd4e9e6618709e15d4101f02e5ee51adbc3b414e191be42699be37bec3abe04
-
SHA512
b67185066076e6fe0ca415e186f1982b3513ea2df127cc8fcf342b50762c1ef7a8bf9109decc3a677481f16e3416dd4eaa16f8cf3279f4eb0e01ad30b30405dd
-
SSDEEP
3072:YHMweZnvHs0XKg3bUYyKTYwynEgVZHKv7WseyJTjYSANm:iMtDzUYCECG7bPYS
Malware Config
Signatures
Files
-
bdd4e9e6618709e15d4101f02e5ee51adbc3b414e191be42699be37bec3abe04.dll windows x86
9aaeb2db78e7bf9f51abda8b619cec1f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringA
CreateEventA
CreateFileA
CreateIoCompletionPort
CreateThread
FreeLibrary
GetCommandLineA
GetCurrentThreadId
GetFileSize
GetLocalTime
GetProcAddress
GetVersionExA
GlobalAlloc
LoadLibraryA
LocalUnlock
MulDiv
MultiByteToWideChar
ReadFile
ReleaseMutex
SetFilePointer
SetThreadPriority
Sleep
VirtualAlloc
WaitForSingleObject
lstrcatA
lstrlenA
user32
CharNextA
CopyRect
CreatePopupMenu
EnumWindows
GetLastActivePopup
GetMenuItemInfoW
GetSystemMetrics
ModifyMenuW
MoveWindow
PostQuitMessage
RedrawWindow
SendNotifyMessageW
SetTimer
SystemParametersInfoA
UnionRect
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 974B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ