Static task
static1
Behavioral task
behavioral1
Sample
41556b26ee065ef17a62a6c2e1a80bb5c5b26fae943de38b737f001a3956c93a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
41556b26ee065ef17a62a6c2e1a80bb5c5b26fae943de38b737f001a3956c93a.dll
Resource
win10v2004-20220812-en
General
-
Target
41556b26ee065ef17a62a6c2e1a80bb5c5b26fae943de38b737f001a3956c93a
-
Size
15KB
-
MD5
a13054c9e11812b9de9a7b93a860b065
-
SHA1
bc7134120cd4c8a14d54e73f3090d2b8eed29a10
-
SHA256
41556b26ee065ef17a62a6c2e1a80bb5c5b26fae943de38b737f001a3956c93a
-
SHA512
4409548ee2ece1149ee7fda4c64fdf643f15daad7cff1dcb1f28c24402670413f1ffb724c8be9e4cf30abab090b82229450563f19d0a09c19dd332940b5b3668
-
SSDEEP
192:/zSfysCpPuh8V/tpVx1lPdV1wVKCKMje1lRe7iwzNK2E2T2U+OccvLBVWeq:qAPuOLVx991VxskOccvvW
Malware Config
Signatures
Files
-
41556b26ee065ef17a62a6c2e1a80bb5c5b26fae943de38b737f001a3956c93a.dll windows x86
6fc9696f99b1045fa802dcb0853eb31a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
strstr
strncpy
_stricmp
strtoul
_snwprintf
_snprintf
memset
_chkstk
memcpy
shlwapi
StrStrIA
PathFindFileNameA
kernel32
HeapAlloc
VirtualFree
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetProcAddress
HeapFree
GetLastError
HeapCreate
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
Sleep
CreateThread
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 546B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ