Static task
static1
Behavioral task
behavioral1
Sample
7c8531d612885b75338d244ff57d094bfef7b14a16b0c150a43ff678cdd9ba77.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c8531d612885b75338d244ff57d094bfef7b14a16b0c150a43ff678cdd9ba77.dll
Resource
win10v2004-20220812-en
General
-
Target
7c8531d612885b75338d244ff57d094bfef7b14a16b0c150a43ff678cdd9ba77
-
Size
56KB
-
MD5
e056bad3b88f91681c76e255119a8da7
-
SHA1
62ba6238ff12be0a35a93aebcd3e0238dab860ff
-
SHA256
7c8531d612885b75338d244ff57d094bfef7b14a16b0c150a43ff678cdd9ba77
-
SHA512
8268c5820a04648d53a7f270390f0f16b8face325574c5e441fec1585fb4900c9a53cd9d3da191a8974b816d54a8cb9799684578731efd8610eb267b02e4ecb8
-
SSDEEP
768:/VucbSAJ63oAeYYEDVPzaWkt88i6nE2MTx/+9Wgbf7JeL5Jyo6lr:/VuczAeYYcFuB88bMTx+9Wg2woer
Malware Config
Signatures
Files
-
7c8531d612885b75338d244ff57d094bfef7b14a16b0c150a43ff678cdd9ba77.dll windows x86
e464e1c6c37ad8808e496482ba42fb0a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CloseHandle
GetProcAddress
GetFileSize
CreateFileA
GetLastError
Sleep
CreateThread
ExitThread
FreeLibrary
LoadLibraryA
GetLocalTime
GetDriveTypeA
GetModuleFileNameA
GetTickCount
CreateProcessA
WriteFile
GetStartupInfoA
CreatePipe
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers
wininet
InternetCloseHandle
ws2_32
gethostname
WSAStartup
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ