Static task
static1
Behavioral task
behavioral1
Sample
47ab3088180503771eead6faacdb6e22d4434d4a3b6788f5e12fd63a01bd8f17.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
47ab3088180503771eead6faacdb6e22d4434d4a3b6788f5e12fd63a01bd8f17.dll
Resource
win10v2004-20220901-en
General
-
Target
47ab3088180503771eead6faacdb6e22d4434d4a3b6788f5e12fd63a01bd8f17
-
Size
41KB
-
MD5
c0ad420b029b00fae7669396ebbe4562
-
SHA1
366e99902b61356187a4a195153876a0e3982df9
-
SHA256
47ab3088180503771eead6faacdb6e22d4434d4a3b6788f5e12fd63a01bd8f17
-
SHA512
7504d1332117ef822bccfae865b1b80b773080a1478c67ce5680b53cadafb43f58fef634888e600748e6082783484e1620e0616220baa20b8228b9674ce07f78
-
SSDEEP
768:L+BvO22t/eJff0gMCTkDlLEnDgoFLGslFG6yiLeYxMCQ:L6O2y/z/5CgonE6yueCMj
Malware Config
Signatures
Files
-
47ab3088180503771eead6faacdb6e22d4434d4a3b6788f5e12fd63a01bd8f17.dll windows x86
2bde6ce955326a0fc448449a2c555155
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
InterlockedExchange
GetProcAddress
GetACP
GetUserDefaultLCID
GetLocalTime
VirtualAlloc
VirtualProtect
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
GetLastError
IsBadReadPtr
GetCurrentThreadId
GetCurrentProcess
IsBadStringPtrA
IsBadCodePtr
GetStartupInfoA
user32
GetCursor
GetWindowContextHelpId
GetWindowTextLengthA
IsCharAlphaNumericA
IsCharAlphaA
GetWindowDC
GetDC
WindowFromDC
GetForegroundWindow
CopyIcon
GetWindow
GetWindowInfo
IsZoomed
IsIconic
GetDesktopWindow
IsMenu
GetClientRect
advapi32
RevertToSelf
IsValidSid
AreAnyAccessesGranted
IsValidAcl
InitializeSecurityDescriptor
msvcrt
_initterm
free
_memicmp
__doserrno
_ultoa
srand
rand
malloc
_adjust_fdiv
__mb_cur_max
modf
_hypot
localeconv
_pctype
_isctype
_ltoa
gdi32
GetBkMode
GdiFlush
GdiGetBatchLimit
GetStretchBltMode
shell32
ord680
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ