fOrdchk16171
Static task
static1
Behavioral task
behavioral1
Sample
88e24175bc6da11ae3a864205046eb4674bacb5007d9b11f21480ebf7bcf8da7.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
88e24175bc6da11ae3a864205046eb4674bacb5007d9b11f21480ebf7bcf8da7.dll
Resource
win10v2004-20220901-en
General
-
Target
88e24175bc6da11ae3a864205046eb4674bacb5007d9b11f21480ebf7bcf8da7
-
Size
56KB
-
MD5
82bffec74c252d487696baef4e213552
-
SHA1
ba00352cbfc0c55effa0ec02df53b367b044db7e
-
SHA256
88e24175bc6da11ae3a864205046eb4674bacb5007d9b11f21480ebf7bcf8da7
-
SHA512
ae028750f0e2ec99ab198bcd04fe5e8b525303fd6d24a2016e7d08301b8a865ed5933fb8c6fa7fe06485d862b9161d17f9dc6b1e0af36d3b866e4fc572d40f4e
-
SSDEEP
768:biuv8PNrsK9BkyIES7QZXo9GFxGC3DDuFYVTx15nBG1Ssfb/Ksfvft0fvf:biuWQK9BbxdoWr3uFQnBG1SUbnH+H
Malware Config
Signatures
Files
-
88e24175bc6da11ae3a864205046eb4674bacb5007d9b11f21480ebf7bcf8da7.dll windows x86
bf1ab06fa5a8bbc9f2e3f8c132b82991
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
CreateEventA
CloseHandle
CreateFileA
GetCurrentThreadId
GetTickCount
GetModuleHandleA
GetStartupInfoA
LockResource
LoadResource
FindResourceA
SetErrorMode
GetCommandLineA
VirtualFree
LoadLibraryA
lstrcmpiA
GetProcAddress
VirtualAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
user32
wsprintfA
GetForegroundWindow
shlwapi
StrStrA
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 29B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ