Static task
static1
Behavioral task
behavioral1
Sample
863adeee6dae2a7606931b0db190d020a2069c0791d6b10e9b391c288429dec3.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
863adeee6dae2a7606931b0db190d020a2069c0791d6b10e9b391c288429dec3.dll
Resource
win10v2004-20220812-en
General
-
Target
863adeee6dae2a7606931b0db190d020a2069c0791d6b10e9b391c288429dec3
-
Size
85KB
-
MD5
0d11ddb8e41df14a0e36f23ddc9c07b0
-
SHA1
0a8b85baf8f8e43c5f397b5507fea069841def58
-
SHA256
863adeee6dae2a7606931b0db190d020a2069c0791d6b10e9b391c288429dec3
-
SHA512
1850aa1124c1dd1f0680bcde1a71439a7ecc95b22c4717588901d28ae5c4f2099d25a2768c6d2a2a32d4b51098dc5806051e2ed22805311c26a3f22694e89b04
-
SSDEEP
1536:K7XhofNf587w9CWTZKdUVeRZ2oQUmI1Qt6N1ttQe5QGX1Au9ctUBz/aTxUXDTFhw:qXal5llT0RHX1Q01j35QkWoWUXv78
Malware Config
Signatures
Files
-
863adeee6dae2a7606931b0db190d020a2069c0791d6b10e9b391c288429dec3.dll windows x86
e8e08a67ebb9977b17af12f79c3f3143
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetLastError
CreateFileW
InterlockedExchange
SetLastError
LoadLibraryExW
FormatMessageA
FreeLibrary
GetVersion
GetCommandLineA
CloseHandle
VirtualProtect
user32
MessageBoxA
CharToOemA
advapi32
RegQueryInfoKeyA
RegCloseKey
RegEnumValueW
rpcrt4
NdrClientCall2
msvcrt
malloc
_initterm
localtime
time
_except_handler3
_adjust_fdiv
iswdigit
_amsg_exit
free
memset
memcpy
_vsnwprintf
_wcsicmp
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ