Static task
static1
Behavioral task
behavioral1
Sample
31c75ab053d8e4aa334fb7ac84a75daeecc337119dd90025ea747c23b6270a42.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
31c75ab053d8e4aa334fb7ac84a75daeecc337119dd90025ea747c23b6270a42.dll
Resource
win10v2004-20220901-en
General
-
Target
31c75ab053d8e4aa334fb7ac84a75daeecc337119dd90025ea747c23b6270a42
-
Size
31KB
-
MD5
99a99705c1d0d77086647f46bd6ef1a7
-
SHA1
a9733e26dd4388e45ba180ca1d8a227381d0c50d
-
SHA256
31c75ab053d8e4aa334fb7ac84a75daeecc337119dd90025ea747c23b6270a42
-
SHA512
8fb85bf687517b14d29b561419033b8f82aa4e3e19e728cbca5e5b7a60a9cc32ac8ed1d1f8c4d439c32fd802bc54df869eb304ecffb44667933d9345563a3afa
-
SSDEEP
384:yRGPUWyJBvNNxIh3GTaJJ9GYbEIDH6fxuuMYQA8TZC38UvTsbi63V85sEnEQ68mm:L+BvO22t/eJff0gMCTkDlLEnDgoFj
Malware Config
Signatures
Files
-
31c75ab053d8e4aa334fb7ac84a75daeecc337119dd90025ea747c23b6270a42.dll windows x86
2bde6ce955326a0fc448449a2c555155
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
InterlockedExchange
GetProcAddress
GetACP
GetUserDefaultLCID
GetLocalTime
VirtualAlloc
VirtualProtect
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
GetLastError
IsBadReadPtr
GetCurrentThreadId
GetCurrentProcess
IsBadStringPtrA
IsBadCodePtr
GetStartupInfoA
user32
GetCursor
GetWindowContextHelpId
GetWindowTextLengthA
IsCharAlphaNumericA
IsCharAlphaA
GetWindowDC
GetDC
WindowFromDC
GetForegroundWindow
CopyIcon
GetWindow
GetWindowInfo
IsZoomed
IsIconic
GetDesktopWindow
IsMenu
GetClientRect
advapi32
RevertToSelf
IsValidSid
AreAnyAccessesGranted
IsValidAcl
InitializeSecurityDescriptor
msvcrt
_initterm
free
_memicmp
__doserrno
_ultoa
srand
rand
malloc
_adjust_fdiv
__mb_cur_max
modf
_hypot
localeconv
_pctype
_isctype
_ltoa
gdi32
GetBkMode
GdiFlush
GdiGetBatchLimit
GetStretchBltMode
shell32
ord680
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ