GetRawFileTypeFactory
Static task
static1
Behavioral task
behavioral1
Sample
1042569c4104664e55fce2cc46f30755118b3c15e04acfd3ab9c1beca126c967.dll
Resource
win7-20220812-en
General
-
Target
1042569c4104664e55fce2cc46f30755118b3c15e04acfd3ab9c1beca126c967
-
Size
324KB
-
MD5
0f156f89f3c17c4f34b426bd0a61c330
-
SHA1
498dfbe862d26a4379533e76d5db8284490f9f90
-
SHA256
1042569c4104664e55fce2cc46f30755118b3c15e04acfd3ab9c1beca126c967
-
SHA512
611162da1134fa726d3309a9f26d623a95040a31a95119690bb2153c35f3175857a7cceef64175abbbbab9f90990394c8efe4c5db602beae009ef391c6b95aff
-
SSDEEP
6144:AlivUbyMuXW5jtH0PyBSTNiBf+vT5yD+o/oIWladurEl6lavzbrE+:AliCyMuXW5j50PyBSTNiBf+vQBjysub+
Malware Config
Signatures
Files
-
1042569c4104664e55fce2cc46f30755118b3c15e04acfd3ab9c1beca126c967.dll windows x86
597cbbb496dd6817cbc3d8f30b35674b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
HeapSize
ExitProcess
HeapAlloc
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
Exports
Exports
Sections
.text Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE