Static task
static1
Behavioral task
behavioral1
Sample
f4865fafbce54f6b1fea40033cd0865b7e12c947120e992ab0eede74e7c0cd32.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f4865fafbce54f6b1fea40033cd0865b7e12c947120e992ab0eede74e7c0cd32.dll
Resource
win10v2004-20220812-en
General
-
Target
f4865fafbce54f6b1fea40033cd0865b7e12c947120e992ab0eede74e7c0cd32
-
Size
58KB
-
MD5
688172e792a3b2e446b0cfca74528e8a
-
SHA1
93f5bad8d4c45a0e38fd80a8fb7add21406fe9f1
-
SHA256
f4865fafbce54f6b1fea40033cd0865b7e12c947120e992ab0eede74e7c0cd32
-
SHA512
01c7c09a1babbeced8ce0a76b6f2887e28aa3ba3547dfc5c247e593c7335c05f209eddb593366085165917acdc8afa29792004fbec2177c80d6cffa8d2bc2e88
-
SSDEEP
1536:lVZZVe7nDLX49B5zr170H2w1ZeGXSMIeC:fLVe7vXsB5VQWIKl
Malware Config
Signatures
Files
-
f4865fafbce54f6b1fea40033cd0865b7e12c947120e992ab0eede74e7c0cd32.dll windows x86
f033c8b8fe2a85bfab9f9987d1824cd9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapCreate
HeapFree
GetProcAddress
LoadLibraryW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
LocalFree
FormatMessageW
GlobalFree
GlobalSize
GlobalReAlloc
lstrcpyW
lstrcpynW
GetFileAttributesW
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
GetCommandLineA
GlobalAlloc
GetModuleHandleW
VirtualProtect
user32
DestroyWindow
ShowWindow
SetWindowLongW
DrawTextW
CharNextW
SetCursor
IsWindow
GetWindowLongW
CharUpperBuffW
CharLowerW
LoadStringW
LoadIconW
EnableWindow
SendMessageW
SetWindowTextW
GetParent
RedrawWindow
DefWindowProcW
GetDlgItem
gdi32
SetTextColor
GetTextExtentPointW
ExtTextOutW
msvcr71
_onexit
malloc
_initterm
free
_except_handler3
__CppXcptFilter
__dllonexit
_adjust_fdiv
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ