Static task
static1
Behavioral task
behavioral1
Sample
61d8d59ec514099a3905cb4852b7bad5f849697254fbca78af39f437205ffdb1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61d8d59ec514099a3905cb4852b7bad5f849697254fbca78af39f437205ffdb1.dll
Resource
win10v2004-20220812-en
General
-
Target
61d8d59ec514099a3905cb4852b7bad5f849697254fbca78af39f437205ffdb1
-
Size
24KB
-
MD5
712de7904bd91fd5672306aaf928a252
-
SHA1
2092bd33155c35760d5c923f48500ebe00a30554
-
SHA256
61d8d59ec514099a3905cb4852b7bad5f849697254fbca78af39f437205ffdb1
-
SHA512
0f8d25eb4a9ea5965d1fe44ca0704f6df57baa2aeaa7cdcd1787a6f4c4f643689533a1d353e001a6d986b560c98a0a457b4467c60396a8789dc39d500aceb873
-
SSDEEP
192:28H0L5h0O8FehzsHSXyHAcR/gl6B7eGWo9UAN/QypFCw:OczMyHAc1gl6peGv9LNou
Malware Config
Signatures
Files
-
61d8d59ec514099a3905cb4852b7bad5f849697254fbca78af39f437205ffdb1.dll windows x86
89f10e1b1a7e2600a74604ad7cf368d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
ReadFile
GetSystemTime
lstrcatA
DeleteFileA
CloseHandle
GetFileSize
GetLastError
GlobalAlloc
lstrcpyA
SetFilePointer
GetProcessTimes
CreateProcessA
WriteFile
GetTickCount
GetTempFileNameA
GetTempPathA
RtlUnwind
GlobalFree
CreateFileA
Sleep
GetSystemDirectoryA
GetFileAttributesA
user32
wsprintfA
wvsprintfA
Sections
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE