Static task
static1
Behavioral task
behavioral1
Sample
80759cad51439ec6d00c9e3c6879d3218ba417a9693e2eeeef910d9970e96e32.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
80759cad51439ec6d00c9e3c6879d3218ba417a9693e2eeeef910d9970e96e32.dll
Resource
win10v2004-20220812-en
General
-
Target
80759cad51439ec6d00c9e3c6879d3218ba417a9693e2eeeef910d9970e96e32
-
Size
85KB
-
MD5
0bd766434e702d7ab505822cbfa5c150
-
SHA1
5a359a32ceabfe3cbb213c9475df179290e2bbcf
-
SHA256
80759cad51439ec6d00c9e3c6879d3218ba417a9693e2eeeef910d9970e96e32
-
SHA512
2d8d506ee9309169ce21e8c83838bb02c0a2f911ba4570d1f34137201bcd2a321a87e3affccac5bd8a4edbfd92f33abbb1c1765c084603b2baf2f178ea6a443c
-
SSDEEP
1536:sGcbCgEtzxIlL9snrnfZ0A98kb+Ou8ShoS+eNzBdbhzehH3G:sGvgEpiL+zuf9HroZeNzTbhz/
Malware Config
Signatures
Files
-
80759cad51439ec6d00c9e3c6879d3218ba417a9693e2eeeef910d9970e96e32.dll windows x86
e8330ebd9200d7a029da39497710b69d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDBCSLeadByte
LoadLibraryA
InterlockedExchange
InterlockedExchangeAdd
GetModuleFileNameA
GetProcAddress
GetVersion
GetUserDefaultLCID
MulDiv
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
GetTickCount
GetCurrentProcess
GetVersionExA
Sleep
QueryPerformanceFrequency
GetCurrentThreadId
SetLastError
IsBadWritePtr
IsDebuggerPresent
QueryPerformanceCounter
user32
IsWindowUnicode
GetWindowRect
GetClientRect
IsCharAlphaNumericA
IsCharAlphaA
GetWindowRgn
WindowFromDC
GetForegroundWindow
GetIconInfo
CopyIcon
GetDlgItem
GetAncestor
GetTitleBarInfo
GetWindow
GetWindowInfo
GetGUIThreadInfo
IsMenu
SetLastErrorEx
BlockInput
IsCharUpperA
advapi32
IsValidSecurityDescriptor
InitializeSecurityDescriptor
IsValidAcl
IsValidSid
RevertToSelf
msvcrt
_initterm
free
memmove
_memccpy
_set_error_mode
_CIasin
_ltoa
_isctype
ldiv
_itoa
div
__doserrno
malloc
_adjust_fdiv
ceil
time
ldexp
_pctype
__mb_cur_max
gdi32
GetPixel
GetStretchBltMode
ole32
CoFileTimeNow
shell32
ord64
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE