WM39FQz_N0zg9@12
Static task
static1
Behavioral task
behavioral1
Sample
0689210a2f833bb7fc4f63f87154c9318f7a08663d0742685435007b43d5c750.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0689210a2f833bb7fc4f63f87154c9318f7a08663d0742685435007b43d5c750.dll
Resource
win10v2004-20220901-en
General
-
Target
0689210a2f833bb7fc4f63f87154c9318f7a08663d0742685435007b43d5c750
-
Size
207KB
-
MD5
351d760bce8bd444006c3217492058c0
-
SHA1
52aed02b49b31048f919993122dea7ed035e4da4
-
SHA256
0689210a2f833bb7fc4f63f87154c9318f7a08663d0742685435007b43d5c750
-
SHA512
4c0dcfdaf14081fc23ca29da4f5b598bbe04d21a364bf0e714d4b840ac909a7e120c720deadfc5bd21212d85ccdf0db2518832c67ee0b4d0cb6765e4ffb982c8
-
SSDEEP
6144:GXo6avo9TBRRgZ13s3Cd546WX3XsdC9hlm65:GYF1YCdS6WXHs89hF
Malware Config
Signatures
Files
-
0689210a2f833bb7fc4f63f87154c9318f7a08663d0742685435007b43d5c750.dll windows x86
6cf592c71b1b863ef6fd8a1f5c3c697c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
lstrcpynA
ResetEvent
InitializeCriticalSection
WaitForSingleObject
FreeLibrary
LoadLibraryA
VirtualAllocEx
GetSystemDefaultLangID
LocalReAlloc
GetOEMCP
FindClose
DeleteCriticalSection
RaiseException
VirtualAlloc
SetEvent
FindResourceA
GetVersion
GetLastError
GetStartupInfoA
SizeofResource
SetLastError
LockResource
ExitProcess
user32
GetMenu
GetTopWindow
CharUpperA
GetWindow
GetWindowDC
GetWindowTextLengthA
gdi32
GetBkColor
CreateFontIndirectA
shell32
SHGetFolderPathA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
Exports
Exports
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ