Hello
Static task
static1
Behavioral task
behavioral1
Sample
36b45b1a6775d89d43e7f9070f374037ce81cc8211d94c7f6c48509144017eab.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
36b45b1a6775d89d43e7f9070f374037ce81cc8211d94c7f6c48509144017eab.dll
Resource
win10v2004-20220812-en
General
-
Target
36b45b1a6775d89d43e7f9070f374037ce81cc8211d94c7f6c48509144017eab
-
Size
44KB
-
MD5
755ba7e2b64173de642ebf62e26109e0
-
SHA1
e1db402093f7a7aa9e28d2c6a74b536e2540672e
-
SHA256
36b45b1a6775d89d43e7f9070f374037ce81cc8211d94c7f6c48509144017eab
-
SHA512
d75fbffec8c443dfc11b90a2410200c08ed550d55a6f11cb407000f7f11cf24f7cec1a335d317a9eeb9d7d0c0f41085ba0355d1dfbc7fb14a8e6fc52b1feae54
-
SSDEEP
768:twlFjalPThjGHuEfLGex7v1GTF2qaSo5A:2ltCPThf+LtvgYTSo
Malware Config
Signatures
Files
-
36b45b1a6775d89d43e7f9070f374037ce81cc8211d94c7f6c48509144017eab.dll windows x86
948080cba97e8b238006f50361ff147f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDrives
CloseHandle
FlushFileBuffers
WriteFile
CreateFileA
lstrcpyA
lstrcatA
GetSystemDirectoryA
GlobalFree
CreateThread
lstrcmpiA
GetModuleFileNameA
GetDriveTypeA
TerminateProcess
OpenProcess
Module32First
Process32First
CreateToolhelp32Snapshot
ReadFile
GlobalAlloc
GetFileSize
lstrlenA
FindFirstFileA
MoveFileA
SetFileAttributesA
Process32Next
Sleep
InterlockedIncrement
InterlockedDecrement
LCMapStringW
LCMapStringA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
user32
MessageBoxA
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
GetUserNameA
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ