Static task
static1
Behavioral task
behavioral1
Sample
f3a1d267b15557945e5b688d20a8b3e3f5d40e46dc09c73ebd1f1fc126d4c64a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3a1d267b15557945e5b688d20a8b3e3f5d40e46dc09c73ebd1f1fc126d4c64a.dll
Resource
win10v2004-20220812-en
General
-
Target
f3a1d267b15557945e5b688d20a8b3e3f5d40e46dc09c73ebd1f1fc126d4c64a
-
Size
9KB
-
MD5
a00727c96b96ead1f90cf36fbb759a53
-
SHA1
620e4dbffaab9e5669b14ba0888f176ef3014314
-
SHA256
f3a1d267b15557945e5b688d20a8b3e3f5d40e46dc09c73ebd1f1fc126d4c64a
-
SHA512
03542a325166d3d1e44aea293752730ea2e62a624f243fb0fb074ffacb5ca1d493bbfce0604d6fc8c0faa93e69bc08f97586ac04c673e26374c8607109509389
-
SSDEEP
96:OsLe2m3Fr6rAjyUTBxRzmH2n5e7nsC6WhVcEXM0pC88oJRraUH8XyL5ulVV1Z5DP:O32w6rATfR6ek6EcIaOWZd1UC
Malware Config
Signatures
Files
-
f3a1d267b15557945e5b688d20a8b3e3f5d40e46dc09c73ebd1f1fc126d4c64a.dll windows x86
1da75e6adb9413ea36047d022204dbae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadProcessMemory
GlobalFree
GlobalLock
GlobalAlloc
GetCurrentProcess
GetModuleFileNameA
CloseHandle
VirtualProtectEx
WideCharToMultiByte
MultiByteToWideChar
ReadFile
CreateFileA
IsBadReadPtr
CreateThread
WriteProcessMemory
VirtualFree
Sleep
VirtualAlloc
user32
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
wsprintfA
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdata Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ