Static task
static1
Behavioral task
behavioral1
Sample
57da78a8b4765f4adf3422567d2f4ec61a5418c0bca3600173e33fe388a3e5c1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
57da78a8b4765f4adf3422567d2f4ec61a5418c0bca3600173e33fe388a3e5c1.dll
Resource
win10v2004-20220812-en
General
-
Target
57da78a8b4765f4adf3422567d2f4ec61a5418c0bca3600173e33fe388a3e5c1
-
Size
96KB
-
MD5
6734646f71984f41f59daa3966b4f169
-
SHA1
753ae415683b97faebe2449e655027bf24367582
-
SHA256
57da78a8b4765f4adf3422567d2f4ec61a5418c0bca3600173e33fe388a3e5c1
-
SHA512
b9fbb02425be445396d4e66d0fc955c6ece13b19239e62885edd91c1ca4265b6225bf5b74ddbc175df3a4bbbc88c495953fc83292ae6debae87f2c248fd0ae0e
-
SSDEEP
1536:RfYMT4Hm4fEEroH5JnhYkyOCNTTwgl/GfnuuvUGqtyhn8:1TAEr5JiB3xA7qtyhn8
Malware Config
Signatures
Files
-
57da78a8b4765f4adf3422567d2f4ec61a5418c0bca3600173e33fe388a3e5c1.dll windows x86
83e13d624c57c878c449a1b1d001d2ff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExpandEnvironmentStringsA
LoadLibraryW
GetProcAddress
GetModuleHandleA
lstrcpynA
GetLastError
GetSystemDefaultLangID
CloseHandle
DeleteFileA
GetCurrentProcess
GlobalFree
GlobalAlloc
GetVersionExA
GlobalMemoryStatus
WideCharToMultiByte
MultiByteToWideChar
Sleep
DisableThreadLibraryCalls
CreateThread
lstrcpyA
TerminateProcess
ExitProcess
CompareStringW
CompareStringA
SetEndOfFile
GetStringTypeW
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
WriteFile
ReadFile
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
CreateFileA
GetStringTypeA
SetEnvironmentVariableA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
shell32
DoEnvironmentSubstA
shlwapi
PathFileExistsA
iphlpapi
GetAdaptersInfo
ws2_32
inet_ntoa
inet_addr
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ