Static task
static1
Behavioral task
behavioral1
Sample
bef78a8e93de6465d7c2d2b1c01947d57fc4082e7dee22ca3b895e361aa8b228.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bef78a8e93de6465d7c2d2b1c01947d57fc4082e7dee22ca3b895e361aa8b228.dll
Resource
win10v2004-20220812-en
General
-
Target
bef78a8e93de6465d7c2d2b1c01947d57fc4082e7dee22ca3b895e361aa8b228
-
Size
236KB
-
MD5
f29f23affa30d32edc3868e223e11178
-
SHA1
4fc2965e661625ec954f1e8d9b1eaadb6a358109
-
SHA256
bef78a8e93de6465d7c2d2b1c01947d57fc4082e7dee22ca3b895e361aa8b228
-
SHA512
ad1086f5ff4928bfff46188162bc3319fa61ff96eeac034183cbcfa818ac0b280f8e3968a0e1fb187624ab14ab72ca1387fe25ea68fa82c3a1935d28cc992d56
-
SSDEEP
3072:0o71tfT47SMtLajJGk70n12e3o949PBrESK8cWBR5EexBTIdl41IJf83HZbt:0oZZ5dR7012oo9upKpQ6exBEPBJk3ht
Malware Config
Signatures
Files
-
bef78a8e93de6465d7c2d2b1c01947d57fc4082e7dee22ca3b895e361aa8b228.dll windows x86
c177e6b167290f02db4208d8319c187f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegEnumKeyA
RegOpenKeyExA
user32
GetScrollPos
Sections
.hodbi Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ieko Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.amfj Size: 165KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gkafc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ