Static task
static1
Behavioral task
behavioral1
Sample
c2c6e4f4bce6f4298abefb212ffcb6eef7b1ac19f4b0766365efe11d95c3337a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2c6e4f4bce6f4298abefb212ffcb6eef7b1ac19f4b0766365efe11d95c3337a.dll
Resource
win10v2004-20220901-en
General
-
Target
c2c6e4f4bce6f4298abefb212ffcb6eef7b1ac19f4b0766365efe11d95c3337a
-
Size
96KB
-
MD5
844248600ad9b3ed3101a0bac7914f74
-
SHA1
a8b81c7d0b43cfcd5ffcba65f67393834c37d0fa
-
SHA256
c2c6e4f4bce6f4298abefb212ffcb6eef7b1ac19f4b0766365efe11d95c3337a
-
SHA512
feb11e94e7d3faabceb8a793bc5a29c581ebca7f2d45adf5c811ecae137975842a071077884f8c1e001a86ba0e753040bd27dc10aaf1d6941e6c3ec3974e278c
-
SSDEEP
1536:+9eW9WgPs/TL4hMAPdPmtQ35SftG/mEUpnSIKfPc299J6WQeWchUQIM:+9eW93s/TL4NdqQQI7G9KfPc7WQeWccM
Malware Config
Signatures
Files
-
c2c6e4f4bce6f4298abefb212ffcb6eef7b1ac19f4b0766365efe11d95c3337a.dll windows x86
1d5a58994438bbdc1c4e1ef4538b727c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
EnumResourceLanguagesA
ExitProcess
FileTimeToDosDateTime
FreeEnvironmentStringsW
GetACP
GetCommandLineA
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetSystemTime
GetSystemWindowsDirectoryW
GetVersionExA
GlobalFindAtomA
HeapAlloc
HeapCreate
RtlZeroMemory
SwitchToThread
user32
GetWindowThreadProcessId
SetTimer
GetSysColor
comctl32
ImageList_GetIconSize
ImageList_GetIcon
ImageList_Duplicate
CreateUpDownControl
DrawStatusTextA
ImageList_AddIcon
ImageList_DragEnter
ImageList_DragLeave
ole32
CoCreateInstance
dbghelp
ImagehlpApiVersion
sym
SymGetSymPrev
SymGetSymFromName64
SymGetModuleInfoW64
SymGetModuleInfo
ExtensionApiVersion
FindFileInSearchPath
ImageDirectoryEntryToData
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MiniDumpWriteDump
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ