Static task
static1
Behavioral task
behavioral1
Sample
484f2ce0ee9506f403e7f440e468d6dd2845ca2390188f736575d3b7e2935a23.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
484f2ce0ee9506f403e7f440e468d6dd2845ca2390188f736575d3b7e2935a23.dll
Resource
win10v2004-20220812-en
General
-
Target
484f2ce0ee9506f403e7f440e468d6dd2845ca2390188f736575d3b7e2935a23
-
Size
225KB
-
MD5
41b9bc7dcb3caa2a52d597359260ecd0
-
SHA1
05fa02ee8e1dd7265244c03904fd8fc607e88f8e
-
SHA256
484f2ce0ee9506f403e7f440e468d6dd2845ca2390188f736575d3b7e2935a23
-
SHA512
3fd7a92439b44bbe5c4b1dfffc96abbeb74f3b99512b2e763bd914f8339a68dfe5bed1182f55e33e788b213215870978ec437356f9f947008af971fe9e2742cc
-
SSDEEP
6144:OGatnZfYzdeHdtxO8opzMaB46UYddEQL33o:OVtSzdudtM5MaOxYvEQL3
Malware Config
Signatures
Files
-
484f2ce0ee9506f403e7f440e468d6dd2845ca2390188f736575d3b7e2935a23.dll windows x86
82855f45cb028524d13184f344da24c2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetFullPathNameW
GetLastError
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
FlushFileBuffers
HeapFree
LocalFree
QueryPerformanceCounter
SetCurrentDirectoryW
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
WriteFile
lstrcatW
lstrcpyW
lstrlenW
DeleteFileW
CreateFileW
CloseHandle
GetStartupInfoW
LoadLibraryW
GetProcAddress
HeapAlloc
VirtualAlloc
user32
LoadCursorA
LoadIconA
GetSystemMetrics
LoadIconW
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
GetSysColor
gdi32
GetStockObject
advapi32
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyW
RegSetValueExW
msvcrt
memset
memcpy
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ