start
Static task
static1
Behavioral task
behavioral1
Sample
c0456d8f1789e7a308c8caf35c374d7439666597c7ead372c0053816e45733fa.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c0456d8f1789e7a308c8caf35c374d7439666597c7ead372c0053816e45733fa.dll
Resource
win10v2004-20220812-en
General
-
Target
c0456d8f1789e7a308c8caf35c374d7439666597c7ead372c0053816e45733fa
-
Size
1.3MB
-
MD5
4168a2d91937d47ad990320d9b89b010
-
SHA1
ed70705b730a3faaaeddb67eef430b1b6005c0e0
-
SHA256
c0456d8f1789e7a308c8caf35c374d7439666597c7ead372c0053816e45733fa
-
SHA512
33c09673cde9248ea56cbf55fd3f19af5a0a4d6c6c53f554a06a66f8389fc9f18153f08c0f159ff9496abee24a3d8fc992972cd30ca74b1e9880b3fb6dd0d33e
-
SSDEEP
24576:X0Sj4DoHx3EVJ7/k75gOdxWCfM1aPiNOn9dCReW0GZslCKUIqI:ESj4Doo7K5gOTWCfM1aFniJ0CslaI
Malware Config
Signatures
Files
-
c0456d8f1789e7a308c8caf35c374d7439666597c7ead372c0053816e45733fa.dll windows x86
79ae9dcf76f034122d0818e680c6935c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
user32
OpenClipboard
gdi32
CreateRectRgnIndirect
winmm
waveOutReset
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
OleUninitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
ioctlsocket
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Exports
Exports
Sections
.text Size: 292KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1016KB - Virtual size: 1016KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ