Static task
static1
Behavioral task
behavioral1
Sample
fca24f413facc1908de412ce9f0adbcc913a9c84f706bfa9eb5c5dea5d05186c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fca24f413facc1908de412ce9f0adbcc913a9c84f706bfa9eb5c5dea5d05186c.dll
Resource
win10v2004-20220812-en
General
-
Target
fca24f413facc1908de412ce9f0adbcc913a9c84f706bfa9eb5c5dea5d05186c
-
Size
164KB
-
MD5
695ce291946afcca2d64fd27fe6c94d5
-
SHA1
b33e857b41e957f5d26d8787e674d2603bd596af
-
SHA256
fca24f413facc1908de412ce9f0adbcc913a9c84f706bfa9eb5c5dea5d05186c
-
SHA512
6de5c86da3181ba78e270e6fa9a05ddda1f8bf4ee239cb031bfde465f6997e604fac8580b45973e23e360da02ff067c3e2507835e41640f35175ba70caedbc50
-
SSDEEP
3072:Hl4RlDXuwz6VoYKJXB8XPNEjbJu1Hh3Yv7YlpFSDpfEma:F4RlKqcEsPmjjv+L0fEma
Malware Config
Signatures
Files
-
fca24f413facc1908de412ce9f0adbcc913a9c84f706bfa9eb5c5dea5d05186c.dll windows x86
eedfa5a9e85794ce4e8e36c7dceb0dfc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
Sleep
GetACP
IsDBCSLeadByte
LoadLibraryA
InterlockedDecrement
InterlockedExchangeAdd
SetLastError
GetStartupInfoA
MulDiv
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
GetTickCount
GetLastError
GetCurrentThreadId
GetProcessHeap
IsBadReadPtr
GetProcAddress
user32
IsWindowUnicode
GetWindowContextHelpId
IsCharLowerA
GetWindowDC
IsClipboardFormatAvailable
CopyIcon
GetTitleBarInfo
GetWindow
GetLastActivePopup
GetWindowThreadProcessId
IsIconic
GetGUIThreadInfo
InSendMessage
SetLastErrorEx
IsMenu
GetDesktopWindow
GetCursor
msvcrt
frexp
_ultoa
rand
div
_adjust_fdiv
malloc
_initterm
free
_CIpow
memmove
_swab
localeconv
_hypot
_pctype
_isctype
modf
__mb_cur_max
_errno
__doserrno
gdi32
GetROP2
GetBkColor
GetStretchBltMode
GetPixel
ole32
CoFileTimeNow
CoRevertToSelf
shell32
DuplicateIcon
ord680
ord66
ord524
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ