Static task
static1
Behavioral task
behavioral1
Sample
fde89d86f2829dec0bda315cf996e3cfaa78fa0fe629d9b29106a59ff3b65bfc.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fde89d86f2829dec0bda315cf996e3cfaa78fa0fe629d9b29106a59ff3b65bfc.dll
Resource
win10v2004-20220812-en
General
-
Target
fde89d86f2829dec0bda315cf996e3cfaa78fa0fe629d9b29106a59ff3b65bfc
-
Size
44KB
-
MD5
66bee70defb3ec6cda452756ca601e86
-
SHA1
9cbe8b02b84e56c1551445a14410a3e68c465b7c
-
SHA256
fde89d86f2829dec0bda315cf996e3cfaa78fa0fe629d9b29106a59ff3b65bfc
-
SHA512
18489c9a6e8dfeed1b42cb913fb9101d8657b38f9c4522b73e431cab418f29eff949e10b0707b3f714a0591a447d5976378daadcfb03bd26fee01795d3c328e2
-
SSDEEP
768:ZIIvTS1UCavKomsMghv1IC783fdY+iLGDwyY1fh1o9Sup:ZJLjvKo5MgIp32zLGD3sowup
Malware Config
Signatures
Files
-
fde89d86f2829dec0bda315cf996e3cfaa78fa0fe629d9b29106a59ff3b65bfc.dll windows x86
0ca3f752270255be756ae3c499107508
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetTickCount
GetLastError
QueryPerformanceCounter
CloseHandle
GetStdHandle
GetCurrentThreadId
GetCurrentProcessId
GetStringTypeW
GetStringTypeA
LCMapStringW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
RtlUnwind
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ