Static task
static1
Behavioral task
behavioral1
Sample
cec8a0bf03382b9fa782a29a19aff7efa812b9a1f731b80e541fae44cc9be29f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cec8a0bf03382b9fa782a29a19aff7efa812b9a1f731b80e541fae44cc9be29f.dll
Resource
win10v2004-20220812-en
General
-
Target
cec8a0bf03382b9fa782a29a19aff7efa812b9a1f731b80e541fae44cc9be29f
-
Size
107KB
-
MD5
6f0cafae60513602e300dde9eadcf076
-
SHA1
daeff26037a1ade93bd0ae58bec7c8d6cb12bd24
-
SHA256
cec8a0bf03382b9fa782a29a19aff7efa812b9a1f731b80e541fae44cc9be29f
-
SHA512
50efb8ff27968a944778a1518ee8086d26d6f50ed36a088c752161513db5899055b253b0559749bb7321ae9a7bce32748723190845693fdf50c17e6ef019fa6f
-
SSDEEP
1536:LWilBAOYwjJ2QCsfMOnYbnInoq3MXpOyi19RcTvB1Qxg8oFMqqU+NV23S2lTl:Lpfl7YTIV3MEyizRIpV8oFMqqDLy/lJ
Malware Config
Signatures
Files
-
cec8a0bf03382b9fa782a29a19aff7efa812b9a1f731b80e541fae44cc9be29f.dll windows x86
2b08a1a84fe3114376f83b1d05686d31
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
VirtualProtect
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GlobalFree
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ