meg
Static task
static1
Behavioral task
behavioral1
Sample
10df819bde80057e0c9b4ff2ba04a9bbc9ede7d4bfeada8fa6d3216d87bf88db.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
10df819bde80057e0c9b4ff2ba04a9bbc9ede7d4bfeada8fa6d3216d87bf88db.dll
Resource
win10v2004-20220901-en
General
-
Target
10df819bde80057e0c9b4ff2ba04a9bbc9ede7d4bfeada8fa6d3216d87bf88db
-
Size
1.7MB
-
MD5
b6d180f7978cb050d072011a506f19c1
-
SHA1
76f5643839db79c058f2e0925b3b53b5ea190b36
-
SHA256
10df819bde80057e0c9b4ff2ba04a9bbc9ede7d4bfeada8fa6d3216d87bf88db
-
SHA512
3fecfc5f255b93f855ba9f0dd11e6f9432cc50d498220a6cc1c45d1d63a6857107927550c1eb54f65c1df638054fcb0d9faebb44fb2d7e16b4a6540828288255
-
SSDEEP
24576:mEnLXnz1v3E4AnzV5kck3BEU9UhhJvxdPO36BJcF/MBjuWS+D4dOsLS0g8:T/ZKnzDkckRloJzvrS/yjZS+DcLn
Malware Config
Signatures
Files
-
10df819bde80057e0c9b4ff2ba04a9bbc9ede7d4bfeada8fa6d3216d87bf88db.dll windows x86
8a963083c770439d7d5c7c2cc951433d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetConnectStatusA
kernel32
GetVolumeInformationA
user32
SetClipboardData
gdi32
OffsetViewportOrgEx
winmm
waveOutRestart
winspool.drv
DocumentPropertiesA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ord17
ws2_32
WSACleanup
wininet
HttpOpenRequestA
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Exports
Exports
Sections
.text Size: 468KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ