Static task
static1
Behavioral task
behavioral1
Sample
938c58b577475cf6cca37d4bd859b8bd99b000fe6aa5d7dca4ac11cc0c28eb0f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
938c58b577475cf6cca37d4bd859b8bd99b000fe6aa5d7dca4ac11cc0c28eb0f.dll
Resource
win10v2004-20220812-en
General
-
Target
938c58b577475cf6cca37d4bd859b8bd99b000fe6aa5d7dca4ac11cc0c28eb0f
-
Size
391KB
-
MD5
9110a1eebee9470620d8c3e593298990
-
SHA1
765bdd6e6502e323a9aacb87f7dd72edef68c34b
-
SHA256
938c58b577475cf6cca37d4bd859b8bd99b000fe6aa5d7dca4ac11cc0c28eb0f
-
SHA512
ccab4e6b0b06b5a82f25580fe863c825bfb0dd32ca50887945e65453fd4298a00df90764a62f8723e0ba50d8dca727802766bdac65215f34888d3b1966ad7a9a
-
SSDEEP
6144:r4o4dLTjSBLOSextW/ay0CT2FdGK6myYVuy0TZLuIGjwfWWMfVl0A0G7g:r4JTm0JQvcGbPYEy0lLuItOWMf70AXg
Malware Config
Signatures
Files
-
938c58b577475cf6cca37d4bd859b8bd99b000fe6aa5d7dca4ac11cc0c28eb0f.dll windows x86
60b5f3ca8972e405a74b1cd471690ecd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadProcessMemory
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
DrawTextA
MessageBoxA
gdi32
GetStockObject
advapi32
RegQueryValueExA
Sections
.text Size: - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MiniMH0 Size: - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MiniMH1 Size: - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.MiniMH2 Size: 390KB - Virtual size: 389KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ