Static task
static1
Behavioral task
behavioral1
Sample
5153e7e287f8f09651fda6128c4a17baebc0797d89c23e2c31b4863d2cff65af.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5153e7e287f8f09651fda6128c4a17baebc0797d89c23e2c31b4863d2cff65af.dll
Resource
win10v2004-20220901-en
General
-
Target
5153e7e287f8f09651fda6128c4a17baebc0797d89c23e2c31b4863d2cff65af
-
Size
71KB
-
MD5
513bdec05360dc6cdc5682e087e6b67d
-
SHA1
b4e0580b259aa28cc76a64816a3d128b2f5fa07e
-
SHA256
5153e7e287f8f09651fda6128c4a17baebc0797d89c23e2c31b4863d2cff65af
-
SHA512
a85ba7c41351c0e823bd1224ca6bfd2fa47ba1c632a2677ade281cd85a848d88914de48c6cefd450da1f9fd4077f658002cde7db2540b8ba10d6e7f733c920ae
-
SSDEEP
1536:sGhxHONezkEqGnJB+dcRUMFHFtVp+usQA2jpMJaQUh9/Aa:sGh8NeYm/zJHF1+usGeJQPAa
Malware Config
Signatures
Files
-
5153e7e287f8f09651fda6128c4a17baebc0797d89c23e2c31b4863d2cff65af.dll windows x86
76b7d9f03721d43fea0c0c883c149537
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualProtect
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCommandLineA
DeleteCriticalSection
WaitForMultipleObjects
LoadLibraryA
MoveFileExW
FreeConsole
HeapAlloc
GetProcessHeap
InitializeCriticalSection
OutputDebugStringA
VirtualAlloc
user32
ReleaseDC
SendMessageW
gdi32
GetTextExtentPointW
ole32
CoTaskMemFree
msvcr71
_onexit
__dllonexit
__CppXcptFilter
malloc
_except_handler3
_adjust_fdiv
memset
free
_XcptFilter
wcstombs
memcpy
mbstowcs
_initterm
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ