Static task
static1
Behavioral task
behavioral1
Sample
32c8c98d4e53f3d88b5ced2c0fa13c51ac924f67108284f5c1091da606fff59e.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
32c8c98d4e53f3d88b5ced2c0fa13c51ac924f67108284f5c1091da606fff59e.dll
Resource
win10v2004-20220901-en
General
-
Target
32c8c98d4e53f3d88b5ced2c0fa13c51ac924f67108284f5c1091da606fff59e
-
Size
145KB
-
MD5
1a64ed35117ce6a22ecaaaf7e91f2e55
-
SHA1
bb652c11e28205b16d5d4707ed61a29336d7e00e
-
SHA256
32c8c98d4e53f3d88b5ced2c0fa13c51ac924f67108284f5c1091da606fff59e
-
SHA512
355db1f5bd18879edbae612b5bbd13259f7859a7322089384c4665842877fd6634fff8ec457ceecf09eabce8ae2e9d31aa3c42b0b69dea8f4794fc9621e90e67
-
SSDEEP
3072:RpovBKzUrgi1FDHDmTl8jAqJDdUMSk/+0zNQoiOuAhoIOM6+1u5lTTZuG:R+MwrguHDmTl8E2+q2MQoiza6oE
Malware Config
Signatures
Files
-
32c8c98d4e53f3d88b5ced2c0fa13c51ac924f67108284f5c1091da606fff59e.dll windows x86
9f9fda32c72620f46544e279888d5a6f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDBCSLeadByte
LoadLibraryA
InterlockedDecrement
InterlockedExchangeAdd
GetModuleFileNameA
GetProcAddress
Sleep
MulDiv
GetLocalTime
VirtualAlloc
VirtualProtect
DosDateTimeToFileTime
QueryPerformanceFrequency
IsDebuggerPresent
GetLastError
IsBadWritePtr
GetComputerNameA
GetUserDefaultLCID
IsBadReadPtr
user32
IsIconic
GetAncestor
GetCursor
IsWindowUnicode
GetMenuContextHelpId
IsCharUpperA
GetWindowDC
IsClipboardFormatAvailable
GetForegroundWindow
GetGUIThreadInfo
GetParent
GetWindowPlacement
IsMenu
InSendMessage
CopyIcon
GetIconInfo
GetDlgItem
advapi32
GetUserNameA
msvcrt
_CIsinh
ldiv
_CIfmod
_adjust_fdiv
malloc
_initterm
free
memmove
_memccpy
_ultoa
time
ceil
ldexp
_pctype
_isctype
modf
__mb_cur_max
localeconv
div
_itoa
_CItanh
srand
gdi32
GetPixel
GdiFlush
GetBitmapDimensionEx
GetStretchBltMode
ole32
CoFileTimeNow
CoDosDateTimeToFileTime
CoRevertToSelf
shell32
DuplicateIcon
ord64
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ