Static task
static1
Behavioral task
behavioral1
Sample
24e7812d20c6e4e1fac3567ed618b7bcea62bd0430fdd328db66631e44090020.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
24e7812d20c6e4e1fac3567ed618b7bcea62bd0430fdd328db66631e44090020.dll
Resource
win10v2004-20220812-en
General
-
Target
24e7812d20c6e4e1fac3567ed618b7bcea62bd0430fdd328db66631e44090020
-
Size
218KB
-
MD5
a258cf423c8d56db4bc82bb44bcd7ea6
-
SHA1
238797011344b8773f668caab167198af5ec8eef
-
SHA256
24e7812d20c6e4e1fac3567ed618b7bcea62bd0430fdd328db66631e44090020
-
SHA512
07cf3cf39eaed16b456b36009c42cb46324073ea8cadd8c645999cbcdf112333063ebbd23f108b2848640823133a1cdfc915e11a0a46ae32dcaf63b67537b7f4
-
SSDEEP
3072:cEgubM6O+fCpa1It00LNNl9xtyDNeGSgsdAvG9mrc2Z41k8h0l3Xhh1BNmUcE7t8:ct2P0Xx8mddh0c2aHhq3Xhn7duDfH0E
Malware Config
Signatures
Files
-
24e7812d20c6e4e1fac3567ed618b7bcea62bd0430fdd328db66631e44090020.dll windows x86
c1c03a2e04679600304699d3f4070b69
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SafeArrayGetElement
SysAllocStringLen
SysStringLen
kernel32
DeleteFileA
HeapDestroy
ExitProcess
ExitThread
GetCommandLineA
FindClose
GetProcAddress
GetACP
SetEndOfFile
LoadLibraryA
VirtualAlloc
lstrlenA
GetModuleHandleA
LocalAlloc
GetVersionExA
GetProcessHeap
user32
GetCursor
shlwapi
PathIsDirectoryA
SHGetValueA
PathFileExistsA
SHEnumValueA
PathIsContentTypeA
SHDeleteValueA
SHSetValueA
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 162KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ