ExchEntryPoint
Static task
static1
Behavioral task
behavioral1
Sample
1300d36f07022276760c6491024ce7af034628ce084e342f2660962c8ac8f9a2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1300d36f07022276760c6491024ce7af034628ce084e342f2660962c8ac8f9a2.dll
Resource
win10v2004-20220812-en
General
-
Target
1300d36f07022276760c6491024ce7af034628ce084e342f2660962c8ac8f9a2
-
Size
86KB
-
MD5
4aea63deab105ebc3fb4671e38bc6cdc
-
SHA1
2975c81e8357f1a65e5793dcfee42065455d90f9
-
SHA256
1300d36f07022276760c6491024ce7af034628ce084e342f2660962c8ac8f9a2
-
SHA512
e90640893ddbcd2cdd4e1ee06831ee50bf420a2592fb7c02c3b20f68297a6179744bd9f4401987705e100ec9ef89b3f6cc40171b56af4310b3bcf93d4b94fbd6
-
SSDEEP
1536:7oZoEPDdLDFH7fMFzFnxc3n7peaQMfreVbdzmtLAdU6/ivHgb+S:cZvDBDFGzFnxcsa7fwBiaU6j3
Malware Config
Signatures
Files
-
1300d36f07022276760c6491024ce7af034628ce084e342f2660962c8ac8f9a2.dll windows x86
ba032aec5908b4ea8d6593eb68dfc627
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
iswalpha
_vsnwprintf
_snwprintf
_except_handler3
_wsplitpath
free
_initterm
_wcsicmp
_stricmp
wcscmp
_wcsnset
wcslen
wcscpy
wcsrchr
wcscat
wcsncmp
??2@YAPAXI@Z
_adjust_fdiv
??3@YAXPAX@Z
wcsncpy
wcschr
malloc
fxsapi
FaxGetPersonalCoverPagesOption
FaxConnectFaxServerW
FaxGetReceiptsOptions
FaxClose
kernel32
MoveFileExW
GetFileType
CreateFileW
Sleep
HeapFree
FindClose
GetLastError
FindNextFileW
FindFirstFileW
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
ExpandEnvironmentStringsW
GetVersionExW
GetComputerNameW
lstrlenW
FreeLibrary
GetProcAddress
LoadLibraryW
CreateDirectoryW
GetFileAttributesW
CloseHandle
ReadFile
HeapCreate
GetProcessHeap
HeapAlloc
GetModuleFileNameW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
user32
DialogBoxParamW
SendMessageW
EnableWindow
GetDlgItem
MessageBoxW
WinHelpW
MessageBeep
AppendMenuW
IsDlgButtonChecked
EnableMenuItem
EndDialog
CheckDlgButton
GetWindowContextHelpId
LoadStringW
mapi32
ord140
ord75
ord139
ord17
ord13
ord15
winspool.drv
EnumPrintersW
OpenPrinterW
GetPrinterW
ClosePrinter
Exports
Exports
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ