Static task
static1
Behavioral task
behavioral1
Sample
fa4896c1204bf248c244dc7cd973c9cdfbe678cc7809687affa6197c2bdd90fc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa4896c1204bf248c244dc7cd973c9cdfbe678cc7809687affa6197c2bdd90fc.dll
Resource
win10v2004-20220812-en
General
-
Target
fa4896c1204bf248c244dc7cd973c9cdfbe678cc7809687affa6197c2bdd90fc
-
Size
25KB
-
MD5
a2cdd133731713bec118cd885f1cb9a0
-
SHA1
cc4c3b024164fbeb8ef3e7b44c98b743ed31ccbd
-
SHA256
fa4896c1204bf248c244dc7cd973c9cdfbe678cc7809687affa6197c2bdd90fc
-
SHA512
59b067ee4493e7859fd8b35546cac15b9193816fada63089b9be3369e422649b93fdf6726599a875bf21e3d14c9ff22387fbf29eca5d6c3f6f9ed683cf979831
-
SSDEEP
384:yXZVRAMVWzRyMEg8rNP/eeY6VisBDEXZCM1c2O4T7ie/GpH5K49xOxARItoiT:kIRpE5R/eetVvEZCN4XieOphpMoiT
Malware Config
Signatures
Files
-
fa4896c1204bf248c244dc7cd973c9cdfbe678cc7809687affa6197c2bdd90fc.dll windows x86
96ef3e72b619e0cfd47c448776bbc317
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect
user32
CheckMenuItem
DestroyWindow
ReleaseDC
WinHelpW
Sections
.itext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 12KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE