Static task
static1
Behavioral task
behavioral1
Sample
7a2f734c204683b5e224f891b375c98dedb0d5b8acb546733f6a7b30bf2e2152.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a2f734c204683b5e224f891b375c98dedb0d5b8acb546733f6a7b30bf2e2152.dll
Resource
win10v2004-20220812-en
General
-
Target
7a2f734c204683b5e224f891b375c98dedb0d5b8acb546733f6a7b30bf2e2152
-
Size
36KB
-
MD5
656555afa6eb3ad57f8055669e1dd880
-
SHA1
bfdb6f40f47d623caa461b546d00e7377a0e8192
-
SHA256
7a2f734c204683b5e224f891b375c98dedb0d5b8acb546733f6a7b30bf2e2152
-
SHA512
e78bad1cf75e241449dea546c4603bf9b6e8aeb3f293962def1cec54f58b8d16bfe23acea5de3651b2ba24ed4919f01f668859fffcb37a55bf57344381fff075
-
SSDEEP
768:ygx66VnTOwPHaYo5mVBpRiB9XfrM4cOlzpKo4sVK:yT6VnTvVowurbckz4o
Malware Config
Signatures
Files
-
7a2f734c204683b5e224f891b375c98dedb0d5b8acb546733f6a7b30bf2e2152.dll windows x86
f793a13f059fbd67ed40044fe448715a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ExitProcess
GetModuleHandleA
LoadLibraryA
CloseHandle
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
DisableThreadLibraryCalls
VirtualProtect
GetCommandLineA
GetVersion
GetProcAddress
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RtlUnwind
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ