LaterOrder
Static task
static1
Behavioral task
behavioral1
Sample
5fa7e271e051b58d7466c4cb05d305cc138e2fc18db239567606e76135583274.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5fa7e271e051b58d7466c4cb05d305cc138e2fc18db239567606e76135583274.dll
Resource
win10v2004-20220812-en
General
-
Target
5fa7e271e051b58d7466c4cb05d305cc138e2fc18db239567606e76135583274
-
Size
187KB
-
MD5
84388e7ad2558fbf5f20db698380c610
-
SHA1
730bc9b73969172f99d932c6f004da8e83695e93
-
SHA256
5fa7e271e051b58d7466c4cb05d305cc138e2fc18db239567606e76135583274
-
SHA512
3750c29c7d04d2e01e426813ed10a2b2caa489a4bed32decfb1000bab73f327dba33168225ffd703aa8a7c65ed2fe3c3fa787643d60c6df112ae97c17f3228be
-
SSDEEP
3072:kd7zwfjjG4Vvu7Cn/V3zpBxySe3WSkXiXXj1g7O8cjzBX0J:g7SjjG4luupzpBxyTOSXTuO8cjzBX0J
Malware Config
Signatures
Files
-
5fa7e271e051b58d7466c4cb05d305cc138e2fc18db239567606e76135583274.dll windows x86
4457a308ea5cb6092776886f09c5e96d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
IsBadReadPtr
lstrcmpiA
CreateFileA
CloseHandle
lstrcmpA
user32
GetWindowTextLengthA
gdi32
SetLayout
msvcrt
free
memmove
memset
calloc
mbtowc
isxdigit
localeconv
wctomb
iswctype
wcstombs
realloc
ungetc
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 4KB - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2 Size: 4KB - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ