Static task
static1
Behavioral task
behavioral1
Sample
f0185edd801e7a2bf471773cf43bb1857e3a4bc76afe4df4fa19bc5b8ba26419.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f0185edd801e7a2bf471773cf43bb1857e3a4bc76afe4df4fa19bc5b8ba26419.dll
Resource
win10v2004-20220901-en
General
-
Target
f0185edd801e7a2bf471773cf43bb1857e3a4bc76afe4df4fa19bc5b8ba26419
-
Size
321KB
-
MD5
17e2cdb8df517628bce5adc63f694ad4
-
SHA1
bcd89d3cbabbe9494f46297b97737ca72798aa6a
-
SHA256
f0185edd801e7a2bf471773cf43bb1857e3a4bc76afe4df4fa19bc5b8ba26419
-
SHA512
46a15e761fa61125f408eac8a1af93758477bf4a0e9ed9c431ae4ac13d93ce05e6b50c5f5a378c83ae5ef0980cb51e8f449f67a0702cbae5729edfd09fce8e1f
-
SSDEEP
6144:MqMjYt3z7rtNr4TpFCZbJzHbGFtOjZHg0IhbYvfXVlhrAiPBmPB:MqM8tD7rtNICbbSFkFSbEXNkis
Malware Config
Signatures
Files
-
f0185edd801e7a2bf471773cf43bb1857e3a4bc76afe4df4fa19bc5b8ba26419.dll windows x86
80ad03e58127a213d7daed04f9db0449
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCommandLineA
ExitThread
LoadLibraryA
GetLastError
GetModuleHandleA
LoadLibraryExA
lstrlenA
VirtualAlloc
LocalAlloc
IsBadHugeReadPtr
GetVersionExA
GetProcAddress
GetCommandLineW
ExitProcess
IsBadReadPtr
gdi32
CreateBitmap
GetDIBColorTable
GetDIBits
CopyEnhMetaFileA
GetClipBox
BitBlt
RestoreDC
GetObjectA
GetBitmapBits
user32
SetRect
SetScrollPos
SetScrollInfo
version
GetFileVersionInfoA
Sections
CODE Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RSRC1 Size: 1KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC6 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC9 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC2 Size: 1024B - Virtual size: 566B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RSRC8 Size: 1024B - Virtual size: 727B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ