LevelSetup
Static task
static1
Behavioral task
behavioral1
Sample
14e2a037eb15053a532798e4668ac1dc75de2df1dddde70de05bf26cb2455433.dll
Resource
win7-20220812-en
General
-
Target
14e2a037eb15053a532798e4668ac1dc75de2df1dddde70de05bf26cb2455433
-
Size
140KB
-
MD5
80458d1a96c5c7bb122ac814ab3c1270
-
SHA1
561d2a9030f02bf11e97e1b53b92c31e0d2add45
-
SHA256
14e2a037eb15053a532798e4668ac1dc75de2df1dddde70de05bf26cb2455433
-
SHA512
fd472a7c3a48d00af5d0c3b7697ef44a43b4df42caee319440fbe1bcc6740078eb7d9ae246ab8211b3857657200d36827d2f00d04c4808b83a06bad6bd22b2a6
-
SSDEEP
1536:7uHXnO+RLT8P+iUIr/YEzKCI10bkpVkTNcznokQSDgy6DSZ/A45qwq8eovB7XDSD:7kOya9A/Ga1DgydI7DwRlXFcmc67
Malware Config
Signatures
Files
-
14e2a037eb15053a532798e4668ac1dc75de2df1dddde70de05bf26cb2455433.dll windows x86
bd27b5be3236a9fd570dc36615a4644c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetVersionExA
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
UnhandledExceptionFilter
DisableThreadLibraryCalls
WriteFile
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
VirtualProtect
GetSystemInfo
Exports
Exports
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE