SfcGetFiles
Static task
static1
Behavioral task
behavioral1
Sample
f1806cb197805530a279046b05e2ae1d21cdb5351716257aab1edb374dde0e8d.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f1806cb197805530a279046b05e2ae1d21cdb5351716257aab1edb374dde0e8d.dll
Resource
win10v2004-20220812-en
General
-
Target
f1806cb197805530a279046b05e2ae1d21cdb5351716257aab1edb374dde0e8d
-
Size
950KB
-
MD5
81d84e88df731e18476a428de260b9c1
-
SHA1
d096f21773d3ad472a5e7a68c481a6b6b1a88c83
-
SHA256
f1806cb197805530a279046b05e2ae1d21cdb5351716257aab1edb374dde0e8d
-
SHA512
0c7f7eb3e8a1ad7b2281e608bea0e4f2154b786943dfba4fcb9a00e79155bcda4e67f960849159e94f9a011320da0e6e623c62af9dd6cfb4772c081b7067dbce
-
SSDEEP
3072:78BI5hoUwnepHsVYcAWNwfYpPeLddsNA1rAWIA:78q5hoUwepH7cmcPeLL
Malware Config
Signatures
Files
-
f1806cb197805530a279046b05e2ae1d21cdb5351716257aab1edb374dde0e8d.dll windows x86
42505082c37195b46df47fa4a96d111c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
CreateProcessA
CreateThread
EnterCriticalSection
GetCommandLineA
GetDateFormatA
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetProcAddress
GetThreadLocale
GetTickCount
GetTimeFormatA
GlobalAlloc
IsBadReadPtr
LoadLibraryA
LoadLibraryW
LocalFree
LocalReAlloc
MapViewOfFile
ReadFile
ResumeThread
Sleep
VirtualAlloc
WaitForSingleObject
lstrcmpA
lstrcmpiA
lstrlenA
user32
wsprintfA
BeginPaint
CharNextA
DrawEdge
EndDialog
EndPaint
GetClassInfoExW
GetCursorPos
GetDlgItem
GetLastActivePopup
GetMenuState
GetSysColor
GetSystemMetrics
GetWindowPlacement
GetWindowRect
IsMenu
IsWindowEnabled
LoadMenuW
PaintDesktop
RegisterClassW
SetCapture
SetRect
UnregisterHotKey
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 1006B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ