Static task
static1
Behavioral task
behavioral1
Sample
80268aa311d18a5a3de8b1d085752489172f93786939244d3a944f9bc8da43bd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80268aa311d18a5a3de8b1d085752489172f93786939244d3a944f9bc8da43bd.dll
Resource
win10v2004-20220901-en
General
-
Target
80268aa311d18a5a3de8b1d085752489172f93786939244d3a944f9bc8da43bd
-
Size
1.3MB
-
MD5
12d63ba24125bce907d566b17d87e58b
-
SHA1
427c58d3a42a1ccb1410b261fa01bc52d9732f36
-
SHA256
80268aa311d18a5a3de8b1d085752489172f93786939244d3a944f9bc8da43bd
-
SHA512
71c0517bc24c2a6d2fe94c133db58c002e1d75fe80ef91c57e71b3e5e292ffe79c93a34eb908a712841c1f3de537094e7c85f2d04131a4799d0d775cca40c0b0
-
SSDEEP
24576:i9cKNnS2asZhPy2nJgwoWS2CrNMEPisarQ8eqfajP9u9meNFDRE1eiYFsd4B:HKNS2t7nJgWSjrNMESijemeTyBV4B
Malware Config
Signatures
Files
-
80268aa311d18a5a3de8b1d085752489172f93786939244d3a944f9bc8da43bd.dll windows x86
5b08fa2ef203a2f97810f6e1b64b6577
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualProtect
VirtualAlloc
VirtualFree
GetCommandLineA
Sections
.text Size: 1.2MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ