DriverProc
Static task
static1
Behavioral task
behavioral1
Sample
236ca6f9e1521929174d9f5cf6c86c0bc6f110d5afe5b91435b14b62ca665d6f.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
236ca6f9e1521929174d9f5cf6c86c0bc6f110d5afe5b91435b14b62ca665d6f.dll
Resource
win10v2004-20220812-en
General
-
Target
236ca6f9e1521929174d9f5cf6c86c0bc6f110d5afe5b91435b14b62ca665d6f
-
Size
368KB
-
MD5
6d012b04bbb81a7a2d54eae09c433d44
-
SHA1
09beb1308b0b805deac82e3069f1b2f762e4de83
-
SHA256
236ca6f9e1521929174d9f5cf6c86c0bc6f110d5afe5b91435b14b62ca665d6f
-
SHA512
ca2e2487382793d0116fee177fa54cc7874a1af5bf76808ec1a0fabce0973d692a57634717e99a00f83f6039927a0f4d1b407a320fbd9a9a600f0503b4e76104
-
SSDEEP
3072:ai90u7yUea2I04AQ9BmE1iRhyuWzG2+rySYeo6:VyuWuGQiui+7zbEY
Malware Config
Signatures
Files
-
236ca6f9e1521929174d9f5cf6c86c0bc6f110d5afe5b91435b14b62ca665d6f.dll windows x86
1463a7293ffbaa32b17e88e4322d59ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
LocalFree
WideCharToMultiByte
SetHandleCount
GetStdHandle
VirtualFree
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
RtlUnwind
GetStringTypeW
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
LocalAlloc
GetCPInfo
FreeEnvironmentStringsW
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
HeapReAlloc
user32
SetScrollRange
GetDlgCtrlID
GetScrollPos
SetScrollPos
wsprintfA
SetDlgItemTextA
EndDialog
GetDlgItem
MessageBoxA
DialogBoxParamA
winmm
DefDriverProc
Exports
Exports
Sections
.text Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 465KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ