Static task
static1
Behavioral task
behavioral1
Sample
d427a72c1821316462e77a05cef4c316d6a25a0f10ca1059ac083265e0b1a8a5.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d427a72c1821316462e77a05cef4c316d6a25a0f10ca1059ac083265e0b1a8a5.dll
Resource
win10v2004-20220812-en
General
-
Target
d427a72c1821316462e77a05cef4c316d6a25a0f10ca1059ac083265e0b1a8a5
-
Size
552KB
-
MD5
65dd20dae75b23da3863f19bcba9bc6a
-
SHA1
7e277189bbe5a10a9619d1d90ccff7e6e1e6465b
-
SHA256
d427a72c1821316462e77a05cef4c316d6a25a0f10ca1059ac083265e0b1a8a5
-
SHA512
6f5f644e73de2715cf33973fa359fc3a6cfaec21d9004be04754c73d220d9a76cd34e1ac85805118aceee5f079ed7fe546135a9436bd1b7fd09cb2e6993ee96f
-
SSDEEP
12288:Oqs7FHpq99IgVCnzxlnMQBMQdZkv4nQICBRbCzB2H4Oq6AB4PfsWHMi4wKTdsNc:OB7FHpqAgAnzx9K4nQICi2YaAB4Pf0MG
Malware Config
Signatures
Files
-
d427a72c1821316462e77a05cef4c316d6a25a0f10ca1059ac083265e0b1a8a5.dll windows x86
191cbd0caca8b69205f73109c9e71e40
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
GetLastError
SizeofResource
LoadResource
LockResource
VirtualAlloc
ReadProcessMemory
GetCurrentProcess
LoadLibraryA
GetProcAddress
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
UnhandledExceptionFilter
GetCurrentThreadId
GetSystemTimeAsFileTime
IsDebuggerPresent
InitializeSListHead
user32
MessageBoxA
vcruntime140
__std_type_info_destroy_list
memset
_except_handler4_common
memcpy
api-ms-win-crt-runtime-l1-1-0
_cexit
_execute_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 543KB - Virtual size: 543KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ