Hooks
Static task
static1
Behavioral task
behavioral1
Sample
3623bee4b41cfd0f6088e85ee26c85bea8386b5149b8c510bd3ad7fbcd3f97f7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3623bee4b41cfd0f6088e85ee26c85bea8386b5149b8c510bd3ad7fbcd3f97f7.dll
Resource
win10v2004-20220812-en
General
-
Target
3623bee4b41cfd0f6088e85ee26c85bea8386b5149b8c510bd3ad7fbcd3f97f7
-
Size
4KB
-
MD5
2167936a36c740c5e832b95e58affe71
-
SHA1
7c04214443e0626a4a56a39d7e09dd3a9ab95fad
-
SHA256
3623bee4b41cfd0f6088e85ee26c85bea8386b5149b8c510bd3ad7fbcd3f97f7
-
SHA512
16861d4dd22007f213cfc4970e31f7ed342f5c37e4c0436acd88b7593e8b5126f524450fa957d374ef3fe7983771cfcff11039cfc7242c1e1ab8e4b3c4659d43
Malware Config
Signatures
Files
-
3623bee4b41cfd0f6088e85ee26c85bea8386b5149b8c510bd3ad7fbcd3f97f7.dll windows x86
2e3209d575b7442922b317e94eeab656
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
CreateThread
ExitProcess
GetModuleFileNameA
LocalAlloc
Sleep
VirtualProtect
WaitForSingleObject
lstrlenA
lstrlenW
user32
CallWindowProcA
CreateDialogParamW
SetWindowLongA
SetWindowTextW
ShowWindow
advapi32
RegCloseKey
RegCreateKeyA
RegSetValueExA
ws2_32
WSASocketA
WSAStartup
closesocket
connect
gethostbyname
ntohs
send
socket
wininet
InternetConnectA
InternetOpenUrlA
Exports
Exports
Sections
.code Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE