Static task
static1
Behavioral task
behavioral1
Sample
17beadae5235073d1efdae754d992195bcbf70c3587eb5a8234c26467a49a3fc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
17beadae5235073d1efdae754d992195bcbf70c3587eb5a8234c26467a49a3fc.dll
Resource
win10v2004-20220812-en
General
-
Target
17beadae5235073d1efdae754d992195bcbf70c3587eb5a8234c26467a49a3fc
-
Size
154KB
-
MD5
6bded3f4a10ffbf80d555014b66989c9
-
SHA1
33fa1b53e947bb3baef845efb818643e1fcdc7cc
-
SHA256
17beadae5235073d1efdae754d992195bcbf70c3587eb5a8234c26467a49a3fc
-
SHA512
6fb5cf929f594787b269cd8773fd7024fc148a89300b2690cb242b096d8f001c56295de717be0a48ee727c0f91496300cc1242bfd3e0ea56441aeeebbf1cb958
-
SSDEEP
3072:ZW74Xt/i0xBebAAcsU7oCtbBCYCIXbbeKxrjIjhIFh4HalmlNXBSpJ:ZW7OZi0xB3Vb+I2KxPGIFh46lmjcH
Malware Config
Signatures
Files
-
17beadae5235073d1efdae754d992195bcbf70c3587eb5a8234c26467a49a3fc.dll windows x86
42d36f3d543e02604a75f469e1cab3e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateGuid
StringFromCLSID
CoTaskMemAlloc
CLSIDFromString
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoGetClassObject
rpcrt4
RpcStringBindingComposeW
RpcStringFreeW
RpcSmDestroyClientContext
RpcBindingFromStringBindingW
shell32
SHGetFolderPathW
DragQueryFileW
DragFinish
CommandLineToArgvW
SHFileOperationW
comdlg32
GetFileTitleA
kernel32
GetVersionExW
HeapFree
HeapAlloc
CreateToolhelp32Snapshot
LoadLibraryW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GlobalFree
oleaut32
LHashValOfNameSys
GetRecordInfoFromTypeInfo
VarUI4FromDec
SysFreeString
Sections
.text Size: 84KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 298B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ