Static task
static1
Behavioral task
behavioral1
Sample
c27d6d533cdf963d99618264f1f041aa65a74561a7611e1b0e592de149a6dbdd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c27d6d533cdf963d99618264f1f041aa65a74561a7611e1b0e592de149a6dbdd.dll
Resource
win10v2004-20220812-en
General
-
Target
c27d6d533cdf963d99618264f1f041aa65a74561a7611e1b0e592de149a6dbdd
-
Size
88KB
-
MD5
37c339fb7e8d55e93787b3fb17962878
-
SHA1
d2b1bc84ebc7908722d17ba57b1d0e531aae1cb9
-
SHA256
c27d6d533cdf963d99618264f1f041aa65a74561a7611e1b0e592de149a6dbdd
-
SHA512
e4fb6379de5a9ac6fd949c20e4e9be5f066c2b58e3db855c329fbea56dc8845d297f2da8a5779e2fc40aab1a8658203ac83ccf9a8d06f96db0f9a44877ec07e7
-
SSDEEP
1536:dBQeI3m9HhV2YcR8Mzgjgw4b5Gz+uD7my7NcB6zBVuL853SwiX7Ckp2zVOurw0:dmejBQYk8U049yCwcBaVuL23SwWmpOuV
Malware Config
Signatures
Files
-
c27d6d533cdf963d99618264f1f041aa65a74561a7611e1b0e592de149a6dbdd.dll windows x86
81c97e9b927046c116bcff6aa61223f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
CopyFileA
GetProcAddress
GetStartupInfoA
HeapAlloc
HeapCreate
HeapSize
InitializeCriticalSection
LoadLibraryA
LoadLibraryExA
LockFile
TerminateProcess
UnhandledExceptionFilter
lstrcmpiA
lstrcpyA
user32
CallWindowProcA
CloseClipboard
DestroyWindow
DispatchMessageA
DrawTextExA
EnableWindow
GetDC
GetMenuState
GetMessageA
GetParent
GrayStringA
MapDialogRect
SendMessageA
SetActiveWindow
SetCursor
SetMenuItemBitmaps
SetPropA
SetRect
ShowWindow
SystemParametersInfoA
Sections
CODE Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 870B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ