ActivateTribeGame
Static task
static1
Behavioral task
behavioral1
Sample
8d8079e2d1fa51c26bc2548f0520850ef5eb32de40b208c3a260d916f4232522.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8d8079e2d1fa51c26bc2548f0520850ef5eb32de40b208c3a260d916f4232522.dll
Resource
win10v2004-20220901-en
General
-
Target
8d8079e2d1fa51c26bc2548f0520850ef5eb32de40b208c3a260d916f4232522
-
Size
180KB
-
MD5
9017f3eb97c52f675b775e9e0751c9f0
-
SHA1
7021052ad60f55cd7e53329cb5ae80572b1be1c5
-
SHA256
8d8079e2d1fa51c26bc2548f0520850ef5eb32de40b208c3a260d916f4232522
-
SHA512
2d891a2c8afd202465dd79bdf601c2b33db753f54505834eedd9f4d3fe984f1abd439103fbd01d9409bbc96dc08ff845960c1a1a4b1fca4a119d4a274ab94bff
-
SSDEEP
3072:W8itoviX7t/CR4nc5cwhWnP9H4zlCgjJQb:W/t/Qsc5cQWFYzcb
Malware Config
Signatures
Files
-
8d8079e2d1fa51c26bc2548f0520850ef5eb32de40b208c3a260d916f4232522.dll windows x86
f8c7a930d90599687685fde3a4413d9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetForegroundWindow
IsIconic
ShowWindow
MessageBoxA
LoadStringA
FindWindowA
kernel32
WideCharToMultiByte
GetEnvironmentStrings
RtlUnwind
GetStringTypeW
LCMapStringW
LCMapStringA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeA
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE