Static task
static1
Behavioral task
behavioral1
Sample
360fd767441edf66dfbfc0437e4983edd8b0934a169f69e248c74573c4ecc277.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
360fd767441edf66dfbfc0437e4983edd8b0934a169f69e248c74573c4ecc277.dll
Resource
win10v2004-20220812-en
General
-
Target
360fd767441edf66dfbfc0437e4983edd8b0934a169f69e248c74573c4ecc277
-
Size
162KB
-
MD5
6c23c693c426a946f91e9da366b4fc4f
-
SHA1
a610067958c147e2fab41007084207f1318f7463
-
SHA256
360fd767441edf66dfbfc0437e4983edd8b0934a169f69e248c74573c4ecc277
-
SHA512
88267f702182c8544720221d1a605b9a56e9b1ea192a3cd31ca48905fb858a175a32c771a56d45f01e835191a1500136f058118ef8db5eb8cfd7caa6bcd59b83
-
SSDEEP
3072:oZ5yBRDqopW1anKcSTKrwEuJZhwHJValiljMqqDLy/GoK:W5yBRDA1sKcS9hwgnqqDLuG
Malware Config
Signatures
Files
-
360fd767441edf66dfbfc0437e4983edd8b0934a169f69e248c74573c4ecc277.dll windows x86
3d8d99e24f266f246cd41caad6db7cf1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
Sleep
InterlockedExchange
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
ReadFile
GetConsoleOutputCP
GetFileType
GetStdHandle
GetProcessHeap
CompareStringA
GetThreadLocale
CompareStringW
lstrlenW
GetConsoleMode
VerifyVersionInfoW
FormatMessageW
LocalFree
UnhandledExceptionFilter
VirtualProtect
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
lstrcmpW
InterlockedCompareExchange
CreateFileA
DeviceIoControl
ReleaseMutex
ReleaseSemaphore
GetCurrentThread
GetThreadPriority
SetThreadPriority
SetEvent
WaitForSingleObject
CloseHandle
GetSystemInfo
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
SetUnhandledExceptionFilter
GetCommandLineA
RtlUnwind
GetVersionExA
VirtualQuery
ExitProcess
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
WriteFile
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LoadLibraryA
user32
wsprintfA
SetClipboardData
CharUpperW
LoadStringW
OpenClipboard
EmptyClipboard
CloseClipboard
advapi32
IsTextUnicode
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ