Static task
static1
Behavioral task
behavioral1
Sample
9a3a2ae97ff4633676765512be8e84eb8ba26bc89c5ef8623d26f4a6aba39dbf.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9a3a2ae97ff4633676765512be8e84eb8ba26bc89c5ef8623d26f4a6aba39dbf.dll
Resource
win10v2004-20220812-en
General
-
Target
9a3a2ae97ff4633676765512be8e84eb8ba26bc89c5ef8623d26f4a6aba39dbf
-
Size
164KB
-
MD5
5c0310152cadd492dbd3afcf382ab406
-
SHA1
1f9eef9ca9d507ef1d0c4db7494fe4693410cbad
-
SHA256
9a3a2ae97ff4633676765512be8e84eb8ba26bc89c5ef8623d26f4a6aba39dbf
-
SHA512
80cbde4a0e7a1202c4c514c14c861ccb4960e87854aa54cd721282f3468f40daf63f1ff13c8da494bbeaf6090ed3ec1725e71f7939e28eb68d027ff4821ce128
-
SSDEEP
3072:TqyUQO6C2ZM+xc7HUO9hhm894CEHUXgWaJRMrCzm5keBZjmoqXxo:eAOhEuHpPWjqYJKNXjmrxo
Malware Config
Signatures
Files
-
9a3a2ae97ff4633676765512be8e84eb8ba26bc89c5ef8623d26f4a6aba39dbf.dll windows x86
3f35da5c1a9bff24080a7fcca3baf9d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
LoadLibraryA
GetProcAddress
GetUserDefaultLCID
Sleep
GetLocalTime
VirtualAlloc
VirtualProtect
DosDateTimeToFileTime
GetLastError
GetCurrentThreadId
IsBadStringPtrA
GetCurrentProcess
IsBadCodePtr
IsBadWritePtr
MulDiv
IsBadReadPtr
user32
GetDesktopWindow
IsIconic
GetTopWindow
GetWindowInfo
IsWindowUnicode
GetWindowContextHelpId
GetWindowRect
IsCharAlphaNumericA
GetDC
GetIconInfo
CopyIcon
IsChild
IsMenu
SetLastErrorEx
BlockInput
GetWindow
GetAncestor
GetLastActivePopup
advapi32
IsValidSid
InitializeSecurityDescriptor
IsValidAcl
msvcrt
ldiv
_CIpow
_CIsinh
_adjust_fdiv
malloc
_initterm
free
_memicmp
memchr
_swab
_memccpy
_set_error_mode
frexp
_hypot
_pctype
_isctype
ldexp
__mb_cur_max
div
rand
gdi32
GetPixel
GdiFlush
GetStretchBltMode
ole32
CoFileTimeNow
CoRevertToSelf
shell32
DuplicateIcon
ord524
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ