Static task
static1
Behavioral task
behavioral1
Sample
5bc5843aeb542b4cd36e12cdd21b2a690f09a838b797eb82beaa12bf7fc11f2a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bc5843aeb542b4cd36e12cdd21b2a690f09a838b797eb82beaa12bf7fc11f2a.dll
Resource
win10v2004-20220812-en
General
-
Target
5bc5843aeb542b4cd36e12cdd21b2a690f09a838b797eb82beaa12bf7fc11f2a
-
Size
695KB
-
MD5
597750f7b96ba0e722c91334f5538145
-
SHA1
48a40079e9b6fe9d4ef4e3e347adfc138bcd3a16
-
SHA256
5bc5843aeb542b4cd36e12cdd21b2a690f09a838b797eb82beaa12bf7fc11f2a
-
SHA512
3f901dc11d9482392bbd77661408d82baa4c57010ae5bae5ed9e7c4a9b815cf1c3087f1a40b34f4a97af9e54a96e3c24cd7b3fb9fcc65be9bfbdb84dce5adfc6
-
SSDEEP
12288:Qv4DC1CG1/S9ok29cc4c/PEe7q6r70KORVEkHK9UGBzHQD8jilMP/:QADOCGNS9gR/se26rwKnpBzwD8mC
Malware Config
Signatures
Files
-
5bc5843aeb542b4cd36e12cdd21b2a690f09a838b797eb82beaa12bf7fc11f2a.dll windows x86
4b966edab1161404b0c1dce4f0e441c6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc90u
ord801
ord605
ord1274
ord321
ord1241
ord1239
ord1264
ord1180
ord1233
ord2084
ord391
ord1152
ord1273
ord1271
ord1145
ord1076
ord1137
ord322
ord802
ord1088
msvcr90
__dllonexit
_lock
_onexit
_unlock
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_except_handler4_common
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??2@YAPAXI@Z
__CxxFrameHandler3
_crt_debugger_hook
kernel32
SetUnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
LocalFree
GetCurrentProcessId
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 625KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ