PackPE32File
Static task
static1
Behavioral task
behavioral1
Sample
cee41bda844afe87d83b633b8b546e6cfda998265b6755d7c0af81884569bdb5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cee41bda844afe87d83b633b8b546e6cfda998265b6755d7c0af81884569bdb5.dll
Resource
win10v2004-20220812-en
General
-
Target
cee41bda844afe87d83b633b8b546e6cfda998265b6755d7c0af81884569bdb5
-
Size
32KB
-
MD5
549b83756d91f317cab779384d831ce6
-
SHA1
5b3a7b125c596edad50dc1e40a5859516d23cc20
-
SHA256
cee41bda844afe87d83b633b8b546e6cfda998265b6755d7c0af81884569bdb5
-
SHA512
3896d4a45ed6d54fa69bd56b2ac72b6ac0460676e9c5436f728570f2b4e81518dceaf5df32188c5976d9f25bd1da72f60209fef87abeefb039d6a9165a377a3c
-
SSDEEP
768:1e7M2KgWUpXIag0X0Um2G9O8zCXaA7UQG:1e7HxIaReBO8zCnI
Malware Config
Signatures
Files
-
cee41bda844afe87d83b633b8b546e6cfda998265b6755d7c0af81884569bdb5.dll windows x86
f22af3e8308d5c9f87c7735157575a83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowTextA
SendMessageA
MessageBoxExA
MessageBoxA
IsDlgButtonChecked
GetWindowTextLengthA
GetWindowTextA
GetDlgItem
wsprintfA
kernel32
VirtualAlloc
IsBadReadPtr
lstrlenA
lstrcpyA
lstrcmpA
lstrcatA
WriteFile
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
DeleteFileA
ExitProcess
GetFileSize
GetModuleHandleA
GetProcAddress
UnmapViewOfFile
MapViewOfFile
ReadFile
RtlMoveMemory
RtlZeroMemory
SetEndOfFile
SetFilePointer
VirtualFree
comdlg32
GetSaveFileNameA
shell32
ShellExecuteA
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ