Static task
static1
Behavioral task
behavioral1
Sample
af9698b5e6524e39f0975d966e711996dea65d135b6835a60d92d397899dbf1e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af9698b5e6524e39f0975d966e711996dea65d135b6835a60d92d397899dbf1e.dll
Resource
win10v2004-20220812-en
General
-
Target
af9698b5e6524e39f0975d966e711996dea65d135b6835a60d92d397899dbf1e
-
Size
244KB
-
MD5
46a1411a42260baff85135068a95d706
-
SHA1
068229674b6767a1b126ebfff202f46f1e76ec92
-
SHA256
af9698b5e6524e39f0975d966e711996dea65d135b6835a60d92d397899dbf1e
-
SHA512
a6eced87a05832237f910db3529508347736216774c586df2265094f1aedb11200591d6a66eb7792cdcda3ef4bcea9efd53a5795ec6c68cf3ee37a48ffb7b857
-
SSDEEP
6144:dAQLsY0brPGi0QZrz30aNKZd/hq47gUXZA:dAW0brKQxLZNK/dq
Malware Config
Signatures
Files
-
af9698b5e6524e39f0975d966e711996dea65d135b6835a60d92d397899dbf1e.dll windows x86
55a88d91046e2a4c7872f45f829e51c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetScrollPos
CreateIcon
InsertMenuA
CloseWindow
kernel32
lstrlenA
FindClose
FreeResource
GetStdHandle
ExitThread
OpenFile
GetCPInfo
DeleteFileW
FormatMessageA
OpenFileMappingA
GetFileType
GetLocalTime
GetCommandLineA
GetPriorityClass
HeapAlloc
ReadFile
CopyFileExA
CreateDirectoryA
ExitProcess
GetLastError
CopyFileA
WriteFile
lstrcatA
advapi32
RegLoadKeyA
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyA
RegEnumKeyExW
RegGetKeySecurity
RegDeleteValueA
RegDeleteKeyA
Sections
.46ga Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.b055 Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1dfa4 Size: 187KB - Virtual size: 535KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdff Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.g901c Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE