Script
Static task
static1
Behavioral task
behavioral1
Sample
9fea2ebcdf68850c5868d8969ea33c2b743a164728f7b95ba2cb75dd59f1e887.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9fea2ebcdf68850c5868d8969ea33c2b743a164728f7b95ba2cb75dd59f1e887.dll
Resource
win10v2004-20220901-en
General
-
Target
9fea2ebcdf68850c5868d8969ea33c2b743a164728f7b95ba2cb75dd59f1e887
-
Size
123KB
-
MD5
904370a3e2e017df17c362241ed85d70
-
SHA1
9f20652598e631c8a7b9451d293cb54cc8dd9413
-
SHA256
9fea2ebcdf68850c5868d8969ea33c2b743a164728f7b95ba2cb75dd59f1e887
-
SHA512
77a72d932c82f3eef139fd05b82b733538d27e61b52e892e626382e8b7949f429918133db7df93860c4d87e33d56e0f4772a6ae68214bcbd171f0a4c99c44ee6
-
SSDEEP
3072:MwU609VMH0T/tmUIhYA8wxcvb4VxeAv3Kuq:MJrHISABcvkHewo
Malware Config
Signatures
Files
-
9fea2ebcdf68850c5868d8969ea33c2b743a164728f7b95ba2cb75dd59f1e887.dll windows x86
c1eddc2d743572429fa0b1a79b7ac0fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrcmpA
lstrlenA
GlobalFree
lstrcatA
GlobalAlloc
lstrcpynA
FlushFileBuffers
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetLastError
SetFilePointer
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
CloseHandle
Exports
Exports
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE