Static task
static1
Behavioral task
behavioral1
Sample
9ca0c41d31c0d407590f398c7f75bf0682ecab8d70b38d11d8e8b99c207372ba.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9ca0c41d31c0d407590f398c7f75bf0682ecab8d70b38d11d8e8b99c207372ba.dll
Resource
win10v2004-20220901-en
General
-
Target
9ca0c41d31c0d407590f398c7f75bf0682ecab8d70b38d11d8e8b99c207372ba
-
Size
121KB
-
MD5
74bf37d9490f17fc6b0c1ee452c071bb
-
SHA1
e34ccbf45a09ff0bc1ec834f8cfde877d3e218b4
-
SHA256
9ca0c41d31c0d407590f398c7f75bf0682ecab8d70b38d11d8e8b99c207372ba
-
SHA512
5e7755fcc9dfcadbac6d2fdcbe280543411b7809f01feec7a9557ad0ece3bb3ea10d00ce1e2f0f072e5d798369dc132abd07079566e9983443a191d43ab957bc
-
SSDEEP
3072:8+nZ7iDVn9/ugoC+zfgzSOP/GVgnJxvpWeYeQj2g0J+S+5:8+nZMnJu9PDgzwktpWevQKg0JN+5
Malware Config
Signatures
Files
-
9ca0c41d31c0d407590f398c7f75bf0682ecab8d70b38d11d8e8b99c207372ba.dll windows x86
1c9fd87e3738a28d8ab6f48b3c011152
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDBCSLeadByte
LoadLibraryA
InterlockedDecrement
GetModuleFileNameA
GetProcAddress
GetStartupInfoA
Sleep
MulDiv
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
QueryPerformanceFrequency
IsDebuggerPresent
SetLastError
GetLastError
GetCurrentProcess
IsBadStringPtrA
GetProcessHeap
IsBadReadPtr
GetUserDefaultLCID
user32
GetCursor
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
IsCharUpperA
GetWindowDC
GetDC
WindowFromDC
GetIconInfo
GetAncestor
GetWindowInfo
GetWindowThreadProcessId
IsWindowVisible
GetParent
BlockInput
SetLastErrorEx
IsChild
IsWindowUnicode
advapi32
IsValidAcl
GetUserNameA
msvcrt
_adjust_fdiv
malloc
_initterm
free
_memicmp
_CIcosh
memchr
srand
_CIfmod
_set_error_mode
_CIacos
localeconv
_pctype
_isctype
__mb_cur_max
modf
_errno
_CIsinh
gdi32
GetBitmapDimensionEx
GetBkColor
GetStretchBltMode
GdiGetBatchLimit
GetPixel
ole32
CoGetCurrentProcess
shell32
ord524
ord66
ord680
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ