Static task
static1
Behavioral task
behavioral1
Sample
6b66fbb1f82c57324fd2d9b7e00c41ac55a23e16f54a981f48d9a7dffd8aae85.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b66fbb1f82c57324fd2d9b7e00c41ac55a23e16f54a981f48d9a7dffd8aae85.dll
Resource
win10v2004-20220812-en
General
-
Target
6b66fbb1f82c57324fd2d9b7e00c41ac55a23e16f54a981f48d9a7dffd8aae85
-
Size
300KB
-
MD5
5a8790fac30101db588406fa1d947a80
-
SHA1
ebb04b61d34410f9c5cf7246cdfe14764a31ff61
-
SHA256
6b66fbb1f82c57324fd2d9b7e00c41ac55a23e16f54a981f48d9a7dffd8aae85
-
SHA512
7bb69a4884eea5c94e451159776be19885d65249f4c6039271de605402150236bcd2a6dd861151287d5dc33f19c14cac3451b93806bc6e7462bf541eb0c96df5
-
SSDEEP
6144:ypzwcZkq00zwcZkqgeGzwcZkqGNtjjiqr2VhhY:NLLE7NWYg
Malware Config
Signatures
Files
-
6b66fbb1f82c57324fd2d9b7e00c41ac55a23e16f54a981f48d9a7dffd8aae85.dll windows x86
fceb996f905ba7c45e98ed42dc0608cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
ExpandEnvironmentStringsA
CompareStringW
CompareStringA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
HeapAlloc
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCommandLineA
GetVersion
RtlUnwind
RaiseException
HeapFree
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
WriteFile
CloseHandle
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetFullPathNameA
GetCurrentDirectoryA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
SetUnhandledExceptionFilter
GetCPInfo
SetStdHandle
CreateFileA
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetProcAddress
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetEndOfFile
SetEnvironmentVariableA
shell32
ShellExecuteA
psapi
GetModuleFileNameExA
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ