Static task
static1
Behavioral task
behavioral1
Sample
4ef5350b8a744df46f2dd29350a9b44cb719a09fa55d4668af7f9eb5ab592292.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4ef5350b8a744df46f2dd29350a9b44cb719a09fa55d4668af7f9eb5ab592292.dll
Resource
win10v2004-20220812-en
General
-
Target
4ef5350b8a744df46f2dd29350a9b44cb719a09fa55d4668af7f9eb5ab592292
-
Size
11KB
-
MD5
29a0fef43c0985c7f5c4ec4fee9ad2f9
-
SHA1
a9957dd484fafb3df973f6addd1203562566bf07
-
SHA256
4ef5350b8a744df46f2dd29350a9b44cb719a09fa55d4668af7f9eb5ab592292
-
SHA512
e7690ae86651a1270d3f15e63e2a8cd5ddee81155551da21752cd1eb0e445d9e13756a78f96f136f744852bde7988a95f826c8df4ff84130d9d085a2ba0fba0a
-
SSDEEP
192:NT0Gi3EhXnyieSTT9HH2Ai4s4Ni3X+cq1NfY8:qBEhXnyiHTT9HHNns4Nuu4
Malware Config
Signatures
Files
-
4ef5350b8a744df46f2dd29350a9b44cb719a09fa55d4668af7f9eb5ab592292.dll windows x86
38b09cec2532aaccb168316354eeb0cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AllocConsole
Sleep
FreeConsole
SetConsoleTitleA
GetModuleHandleA
VirtualProtect
CreateThread
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetCurrentProcessId
user32
GetAsyncKeyState
msvcr90
_amsg_exit
_initterm_e
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
freopen_s
printf
__iob_func
_adjust_fdiv
_CIsqrt
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 694B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ