Static task
static1
Behavioral task
behavioral1
Sample
0d1991956a2d15ea097a618138295dc81f8acc310602e0ac3bccccf351b61980.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d1991956a2d15ea097a618138295dc81f8acc310602e0ac3bccccf351b61980.dll
Resource
win10v2004-20220901-en
General
-
Target
0d1991956a2d15ea097a618138295dc81f8acc310602e0ac3bccccf351b61980
-
Size
344KB
-
MD5
1009a5cae938c6ee8f5ce64ed4c09678
-
SHA1
1ceedc574629eadefc014383a804c601a3b3feb7
-
SHA256
0d1991956a2d15ea097a618138295dc81f8acc310602e0ac3bccccf351b61980
-
SHA512
bf1937b8ab2336149de135b15577bb76f340bb3e1768e9023a6994d2a74e1e00805757a09330f962326fa42c6d8e64ce50a4fc8e12a7bf52bf9e9cc6a7e042db
-
SSDEEP
6144:wY6ZovSCPU+AqpyAKL8n46uQdxbluFzK35A8QoUXQx1P0TLupL:j6gLPEmxuQdFlQzI+8xOQx1Pkap
Malware Config
Signatures
Files
-
0d1991956a2d15ea097a618138295dc81f8acc310602e0ac3bccccf351b61980.dll windows x86
2b2cba8ed1d252aeeb7b0c5c1a0b9cdb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHDeleteKeyA
HashData
kernel32
Beep
CloseHandle
DeleteFileA
DisconnectNamedPipe
DuplicateHandle
GetConsoleMode
GetExitCodeProcess
SetFilePointer
GetStartupInfoA
GetFileType
BackupSeek
BackupRead
GetDriveTypeA
GetWindowsDirectoryA
GetCurrentDirectoryW
SetCurrentDirectoryA
GetSystemDirectoryA
ole32
OleRun
user32
ReleaseDC
advapi32
GetUserNameA
RegLoadKeyA
msvcrt
free
malloc
toupper
winmm
timeGetDevCaps
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 994B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 292KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ