SK
Static task
static1
Behavioral task
behavioral1
Sample
3eb2f676f3b8d5853094382bb2dab0d5cf702705e62744f4d0a116406001e86b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3eb2f676f3b8d5853094382bb2dab0d5cf702705e62744f4d0a116406001e86b.dll
Resource
win10v2004-20220812-en
General
-
Target
3eb2f676f3b8d5853094382bb2dab0d5cf702705e62744f4d0a116406001e86b
-
Size
24KB
-
MD5
112843a5175c96702c1c6f5351cdb202
-
SHA1
c4b258186ba85ec4fdf1b83f7d24aff8de17a0df
-
SHA256
3eb2f676f3b8d5853094382bb2dab0d5cf702705e62744f4d0a116406001e86b
-
SHA512
34324eab246546289e012206ecfc9fbfbd0bea9d37c3efaad913100e04535ca2ef29e4c9ba6607657ca721cc73fe73e89f0b05b9f6e043b5c46b687704a80cff
-
SSDEEP
96:ShhlAcBdhQZSfl4D57hsf1fR71kSretNxoy:a3AcD4Smp+f1fRW
Malware Config
Signatures
Files
-
3eb2f676f3b8d5853094382bb2dab0d5cf702705e62744f4d0a116406001e86b.dll windows x86
86442b2f52ed58be06ac551b2b117b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetCurrentProcess
GetProcAddress
LoadLibraryA
lstrcatA
GetCurrentProcessId
GetLocalTime
lstrcpyA
GetCurrentThreadId
user32
SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetThreadDesktop
GetProcessWindowStation
SetWindowsHookExA
CallNextHookEx
ToAscii
GetActiveWindow
wsprintfA
GetWindowTextA
GetKeyboardState
msvcrt
_adjust_fdiv
malloc
_initterm
free
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 927B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Share Size: 4KB - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 250B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ