Static task
static1
Behavioral task
behavioral1
Sample
f083ad4b4d1b417123f6806212d9086b5a02f72a97c2d1d5657e71bcaec162c0.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f083ad4b4d1b417123f6806212d9086b5a02f72a97c2d1d5657e71bcaec162c0.dll
Resource
win10v2004-20220812-en
General
-
Target
f083ad4b4d1b417123f6806212d9086b5a02f72a97c2d1d5657e71bcaec162c0
-
Size
11KB
-
MD5
8156a281c9e1efe336a6008859ce97b2
-
SHA1
30e8eb6427855e85538f034b1c5888c1940f9947
-
SHA256
f083ad4b4d1b417123f6806212d9086b5a02f72a97c2d1d5657e71bcaec162c0
-
SHA512
9e39d93ba99106aa44fe6b4fd409574a323fd5a72c83eb2377f94aff0b3ad608e3b609349d1e3e3839963f85344b98c5e0c9fa45c9acb342f89ea7f82dbfef28
-
SSDEEP
192:1yPJukD4xD7FkXb16IBJBbuw3JExww9oFVAFy+tTDMcZ:4QBlRk/Tuw5EiAtDZ
Malware Config
Signatures
Files
-
f083ad4b4d1b417123f6806212d9086b5a02f72a97c2d1d5657e71bcaec162c0.dll windows x86
30c5c62f7224bb74319feaca90bed5c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
CloseHandle
CompareStringA
IsBadReadPtr
LoadLibraryA
GetModuleHandleA
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
GetProcessHeap
GetProcAddress
OpenProcess
lstrlenA
WideCharToMultiByte
GetPrivateProfileStringA
GetCurrentProcess
GetCurrentProcessId
CreateThread
FreeLibrary
GetModuleFileNameA
HeapAlloc
Sleep
VirtualAllocEx
GetTickCount
user32
FindWindowA
GetWindowThreadProcessId
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
wsprintfA
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
wininet
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
msvcrt
strrchr
strstr
_except_handler3
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 918B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ