LocalDetination
Static task
static1
Behavioral task
behavioral1
Sample
d1c5ad222fd6db62e3f9c76607c4efe97e35e542aaedfda553f743283861fd65.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1c5ad222fd6db62e3f9c76607c4efe97e35e542aaedfda553f743283861fd65.dll
Resource
win10v2004-20220812-en
General
-
Target
d1c5ad222fd6db62e3f9c76607c4efe97e35e542aaedfda553f743283861fd65
-
Size
136KB
-
MD5
a25e01ff35080df255d7638230d639e3
-
SHA1
d3a9e6c0cb81f5298336fb1a86eb6ca467ad1d23
-
SHA256
d1c5ad222fd6db62e3f9c76607c4efe97e35e542aaedfda553f743283861fd65
-
SHA512
bd0d0f589521a4ff7331e2382d645cebacd59f6aabdeb4a32584656442b0fddfddae018677bd38d3fec30b71688f60cace857d6cf94141a0eb2cf9b0906c08a5
-
SSDEEP
1536:R++bl3rp9YZL3GMsbzCqI/9pC729izqjoRLILXbwh+uPPPPPPPPPPPPPPPPPPPPh:R9lUN//SIQdRLarwAzE
Malware Config
Signatures
Files
-
d1c5ad222fd6db62e3f9c76607c4efe97e35e542aaedfda553f743283861fd65.dll windows x86
e03b312693f70c4128bda490fd01fa9b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
lstrcpynA
FlushViewOfFile
SleepEx
SetEvent
WaitForSingleObject
FreeResource
RemoveDirectoryA
CreateEventA
ReadConsoleA
FindResourceW
DeleteFileA
FindFirstFileA
EnumTimeFormatsA
EnumCalendarInfoA
GetEnvironmentVariableA
GetAtomNameA
SetStdHandle
LocalFree
GetDateFormatA
MultiByteToWideChar
WideCharToMultiByte
VerifyVersionInfoA
QueryPerformanceCounter
OpenSemaphoreA
InterlockedDecrement
CreatePipe
OpenEventA
CloseHandle
ExitProcess
CreateSemaphoreA
DeleteFiber
EnumResourceLanguagesA
LocalLock
ExitThread
DuplicateHandle
AddAtomA
AllocConsole
Beep
DeleteTimerQueueTimer
user32
InSendMessageEx
Exports
Exports
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ