TestSec
Static task
static1
Behavioral task
behavioral1
Sample
155a3afc2d5e4267706fd29c32a10b9a78213c4c8f1d599e237f65432fd40630.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
155a3afc2d5e4267706fd29c32a10b9a78213c4c8f1d599e237f65432fd40630.dll
Resource
win10v2004-20220812-en
General
-
Target
155a3afc2d5e4267706fd29c32a10b9a78213c4c8f1d599e237f65432fd40630
-
Size
60KB
-
MD5
632fa1babd60925e40db7288aea6f140
-
SHA1
abaeb224b695f0dd15aba8017d354b94a399dc0a
-
SHA256
155a3afc2d5e4267706fd29c32a10b9a78213c4c8f1d599e237f65432fd40630
-
SHA512
cae316343222c72413aac10df3e4b5fc81f1c579f5e7647ef2801b84ac97153727f054d257cfa529fc8b017086e421a6b37b0dc42240b8eb962c77c207e2cdbb
-
SSDEEP
768:m35f3BsBhly3ehgPP4QIABEcyyzOltwY6M9THEWvHmG1In0s4o9hU:hDUp34QIQEzyygJM9THnG0TLoI
Malware Config
Signatures
Files
-
155a3afc2d5e4267706fd29c32a10b9a78213c4c8f1d599e237f65432fd40630.dll windows x86
657e161db16f3fa9c855a06a3c04483b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
SetFilePointer
FileTimeToLocalFileTime
GetModuleHandleA
GetVersion
GetDriveTypeA
VirtualFree
GetLastError
GetStringTypeW
GetStringTypeA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind
user32
GetForegroundWindow
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODE Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ