Static task
static1
Behavioral task
behavioral1
Sample
32eff58827244ae6c496dcf31b08b44a97c5561eb38c9d665aa971732c4fc83d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
32eff58827244ae6c496dcf31b08b44a97c5561eb38c9d665aa971732c4fc83d.dll
Resource
win10v2004-20220901-en
General
-
Target
32eff58827244ae6c496dcf31b08b44a97c5561eb38c9d665aa971732c4fc83d
-
Size
132KB
-
MD5
40f2d08e94eeb091fbfec670962e643d
-
SHA1
fbb0d5bab3b1e35fd75a7a3634b69d752ca78ac3
-
SHA256
32eff58827244ae6c496dcf31b08b44a97c5561eb38c9d665aa971732c4fc83d
-
SHA512
4de969a98dccbe387b9d48499848be2a0f78729ec4eff14f89a1f9f1c31e97287729d6059c4a91372bf93b7f2feb14aa82af862a354c79e8bf732c317fde96ed
-
SSDEEP
3072:4d1Ka2NTAHr3cnPJgk2gDRrludvvKk/NpW:4SauMD34RrlgvyUW
Malware Config
Signatures
Files
-
32eff58827244ae6c496dcf31b08b44a97c5561eb38c9d665aa971732c4fc83d.dll windows x86
d71ff74ccfe699004afc74c243196b27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA
version
GetFileVersionInfoA
Sections
.text Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ