Static task
static1
Behavioral task
behavioral1
Sample
f03f0cdb406ae5cf9f28217ddac9c3cbcd9900dd06c13cf7dfc5c2424f3fdc81.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f03f0cdb406ae5cf9f28217ddac9c3cbcd9900dd06c13cf7dfc5c2424f3fdc81.dll
Resource
win10v2004-20220812-en
General
-
Target
f03f0cdb406ae5cf9f28217ddac9c3cbcd9900dd06c13cf7dfc5c2424f3fdc81
-
Size
228KB
-
MD5
8412439ad4f1e3e274125fbe3bec8280
-
SHA1
0912a22bcb67a446f58ca37a1a36958e98fe191f
-
SHA256
f03f0cdb406ae5cf9f28217ddac9c3cbcd9900dd06c13cf7dfc5c2424f3fdc81
-
SHA512
7bbd5a44e8a7eca5c826e46b4950b88cbcd16339bb9104783d2d5f50eb98fe1360d32632a240b398aa790d13f68e603ffcb6daf9de51ab86e530155fd6fd8642
-
SSDEEP
3072:ZioLBDvWg64safsTHjnP171tXu7EZGI6yAabNbjBxKWfjrde4PwPs4S2jbxWGqWL:ZVWDRjP5zXu4n4ahb5jc4Ks4SbGq
Malware Config
Signatures
Files
-
f03f0cdb406ae5cf9f28217ddac9c3cbcd9900dd06c13cf7dfc5c2424f3fdc81.dll windows x86
d29161ee057bb6809606b1cb74f0d9c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
lstrcpynW
LoadLibraryA
GetStartupInfoA
GetProcAddress
GetPrivateProfileIntW
GetModuleHandleA
CreateFileW
GetModuleFileNameA
ReadFile
VirtualAlloc
CreateFileA
ExitProcess
user32
LoadCursorW
LoadIconA
gdi32
SetPixel
SetBkColor
GetTextMetricsW
GetTextExtentPoint32W
StretchBlt
TextOutW
SetTextColor
SetRectRgn
BitBlt
CreateRectRgn
GetDeviceCaps
GetPixel
advapi32
RegQueryValueExA
RegFlushKey
RegDeleteValueW
RegCreateKeyW
RegCloseKey
RegOpenKeyExA
RegSetValueExW
RegQueryValueExW
msvcrt
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
exit
isdigit
rand
srand
time
Sections
.text Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 994B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ