Static task
static1
Behavioral task
behavioral1
Sample
fa1d359587b3dddf6a41736291e0e5d6047c5bc00aad47d01b2f8fc4e6ec452c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fa1d359587b3dddf6a41736291e0e5d6047c5bc00aad47d01b2f8fc4e6ec452c.dll
Resource
win10v2004-20220901-en
General
-
Target
fa1d359587b3dddf6a41736291e0e5d6047c5bc00aad47d01b2f8fc4e6ec452c
-
Size
130KB
-
MD5
06112a7e0d956e964ff5982d06f0a7e7
-
SHA1
998b7298d5626e8776f0e1540c28663324cc9c06
-
SHA256
fa1d359587b3dddf6a41736291e0e5d6047c5bc00aad47d01b2f8fc4e6ec452c
-
SHA512
a54948b248670ea07dac90b9dfd779c16594515fa374a2d58e98b7a6df212b7b8f9d161cc1ce1eb642bd4ff020364cfe58c0c5b9341df7633d398538fd0b703d
-
SSDEEP
3072:jfElfGZa5FkVhxqoQvUW23uKD5bLHzezBx5i74JBspors0bK9jv:zElDUEou2eKD5PTegEJGporJS
Malware Config
Signatures
Files
-
fa1d359587b3dddf6a41736291e0e5d6047c5bc00aad47d01b2f8fc4e6ec452c.dll windows x86
b400d91b2daa6c26e460bacbe305f71d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxW
MessageBoxIndirectW
kernel32
LocalAlloc
OutputDebugStringW
ExitProcess
GetACP
HeapValidate
InterlockedDecrement
InterlockedExchange
advapi32
RegEnumValueW
RegCloseKey
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ