Static task
static1
Behavioral task
behavioral1
Sample
3bb26423d0d30c336f7bcf81b665a537554292e32739ee90e1d98bb6a986c590.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3bb26423d0d30c336f7bcf81b665a537554292e32739ee90e1d98bb6a986c590.dll
Resource
win10v2004-20220812-en
General
-
Target
3bb26423d0d30c336f7bcf81b665a537554292e32739ee90e1d98bb6a986c590
-
Size
163KB
-
MD5
db98e5adad00d9998f16b41c86ed8d26
-
SHA1
d7f25c72c3a34ac67e89ca7cf0081d7dc2ddef7e
-
SHA256
3bb26423d0d30c336f7bcf81b665a537554292e32739ee90e1d98bb6a986c590
-
SHA512
20e965394d07fad082186fd00a1b8b9aab0247c97821629e825ec1bbceac1fa787939d69981c7df96f1c0c9d1693b3dce7dc739e56e7d8aee4e1e0fd6ec01ded
-
SSDEEP
3072:RKtvZXU3Wj4DpeTfnuzOOGxRbtTai3F/oQEvggHDo3XJ1I0F6jGW2T:Rmk3Wj4D8TSPg5r3lycHJ1I0EjP2T
Malware Config
Signatures
Files
-
3bb26423d0d30c336f7bcf81b665a537554292e32739ee90e1d98bb6a986c590.dll windows x86
52d106afb680550c1f50cfd8bb974eff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameA
GetProcAddress
GetVersion
GetUserDefaultLCID
MulDiv
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
VirtualQuery
DosDateTimeToFileTime
IsBadWritePtr
LoadLibraryA
GetACP
Sleep
QueryPerformanceFrequency
IsBadStringPtrA
GetProcessHeap
QueryPerformanceCounter
user32
GetWindowContextHelpId
GetWindowRect
IsCharLowerA
IsCharUpperA
IsCharAlphaNumericA
IsCharAlphaA
GetWindowDC
IsClipboardFormatAvailable
WindowFromDC
GetForegroundWindow
GetIconInfo
CopyIcon
GetWindow
GetWindowInfo
IsZoomed
IsIconic
GetGUIThreadInfo
GetParent
GetDesktopWindow
IsChild
GetMenuContextHelpId
advapi32
IsValidAcl
IsValidSid
RevertToSelf
msvcrt
_adjust_fdiv
malloc
_initterm
free
memmove
_swab
_memccpy
_CIsinh
_CIacos
_CIpow
_CIfmod
rand
__mb_cur_max
_itoa
_errno
time
modf
ceil
ldexp
_pctype
_isctype
localeconv
div
gdi32
GetStretchBltMode
GdiFlush
GdiGetBatchLimit
ole32
CoFileTimeNow
CoGetCurrentProcess
shell32
DuplicateIcon
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ