Static task
static1
Behavioral task
behavioral1
Sample
c6ce42f30f36332d62431d86f6f08f4bcf6dc131af8ee26773118b0adc56cd65.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6ce42f30f36332d62431d86f6f08f4bcf6dc131af8ee26773118b0adc56cd65.dll
Resource
win10v2004-20220901-en
General
-
Target
c6ce42f30f36332d62431d86f6f08f4bcf6dc131af8ee26773118b0adc56cd65
-
Size
229KB
-
MD5
0f3981ca1d17478120ee6bf0fb29cda3
-
SHA1
6b105e8bb22600de8651df3e9a3db462d9464b56
-
SHA256
c6ce42f30f36332d62431d86f6f08f4bcf6dc131af8ee26773118b0adc56cd65
-
SHA512
e06b61f52f70a0a14abbeb173fd00b4e60b78356847c1a7086a946f3cba46363a44a520030b4c98a8ae294a0fbe9651a0808e9b9b419ee8d5aa59d070ac229e0
-
SSDEEP
3072:zsUmpOuvPTBo97uR3rKGuyrb2lIbF9C3bUGGHK6gIwCyNH9TymUHDVhZHXMEu:DkPTBo9ilKGuyXMgFMlCYujLmEu
Malware Config
Signatures
Files
-
c6ce42f30f36332d62431d86f6f08f4bcf6dc131af8ee26773118b0adc56cd65.dll windows x86
87791ebda368c23381438ab6b63a5775
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GetLocalTime
OpenFileMappingA
HeapAlloc
GetFileTime
HeapFree
GetPriorityClass
CopyFileExA
FormatMessageA
DeleteFileA
FreeResource
GetFileType
CopyFileA
ReadFile
OpenFile
lstrlenA
ExitThread
DeleteFileW
GetCPInfo
ExitProcess
CreateDirectoryA
GlobalFree
advapi32
RegEnumKeyW
RegLoadKeyW
RegOpenKeyExW
RegQueryValueA
RegGetKeySecurity
RegEnumValueA
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyA
RegQueryInfoKeyW
RegLoadKeyA
RegEnumKeyExW
RegFlushKey
RegOpenKeyExA
RegEnumValueW
RegEnumKeyExA
RegOpenKeyW
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegCreateKeyW
RegQueryValueW
RegQueryInfoKeyA
RegEnumKeyA
user32
CopyImage
GetCursor
EndDialog
InsertMenuA
DialogBoxParamA
IsMenu
CreateIcon
DialogBoxParamW
GetFocus
DrawTextW
CopyIcon
DrawTextA
LoadCursorA
AlignRects
GetDC
DrawIconEx
IsWindow
GetDlgItem
GetMenu
Sections
.egbmf Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.aimfd Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ilnl Size: 161KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ennnb Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ejpnk Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE