Static task
static1
Behavioral task
behavioral1
Sample
6b03265848a91a1da2b165e95e3e155318059ff32dba6236ad7c0aa075ebc058.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6b03265848a91a1da2b165e95e3e155318059ff32dba6236ad7c0aa075ebc058.dll
Resource
win10v2004-20220812-en
General
-
Target
6b03265848a91a1da2b165e95e3e155318059ff32dba6236ad7c0aa075ebc058
-
Size
190KB
-
MD5
56811b769310c3ce5693a716c2bbb787
-
SHA1
3dfed308db92ebf3fa5a8497f88c99226a49e47e
-
SHA256
6b03265848a91a1da2b165e95e3e155318059ff32dba6236ad7c0aa075ebc058
-
SHA512
c2a7ef9773fbc14f54b412495c0f0c2c10035771a04a634d9cc1e06a4b87a004547b12f33912b33743d2076b4899d1e967ce6d70818438aaaa619b11941175f9
-
SSDEEP
3072:z9XA3NtwbXtTUTEAI0CjIS0tLWiM1YHCkcgXueGEkb+jRFiEGJO:z9XkNtPT/I0CjISMWiM1qLuetkCHRG
Malware Config
Signatures
Files
-
6b03265848a91a1da2b165e95e3e155318059ff32dba6236ad7c0aa075ebc058.dll windows x86
12388bd558810801585fa4fefe336d2a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoA
lstrlenA
ExitProcess
GetTickCount
CreateEventW
QueryPerformanceCounter
GlobalMemoryStatus
GetDiskFreeSpaceExW
GetLongPathNameA
Process32First
Process32Next
OpenProcess
OpenThread
SuspendThread
ResumeThread
lstrcpyA
CreateToolhelp32Snapshot
Thread32First
Thread32Next
DeleteFileW
GetModuleFileNameW
CreateDirectoryW
SetFileAttributesW
CreateDirectoryA
SetFileAttributesA
OutputDebugStringW
OutputDebugStringA
GetModuleFileNameW
SetCurrentDirectoryW
GetCommandLineW
GetModuleHandleA
GetTempPathA
SetStdHandle
CreateFileW
GetProcessHeap
FindFirstFileW
FindNextFileW
WaitForSingleObject
RaiseException
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
Sleep
GetCurrentProcess
SetPriorityClass
SetErrorMode
oleaut32
GetRecordInfoFromTypeInfo
CreateErrorInfo
VarCyFromStr
SysReAllocStringLen
OleLoadPictureEx
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ