safebox
Static task
static1
Behavioral task
behavioral1
Sample
0a97e814e98f8e6b2f27815e2b091316b8ed8f3e3af0d61391e1620507e81ade.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a97e814e98f8e6b2f27815e2b091316b8ed8f3e3af0d61391e1620507e81ade.dll
Resource
win10v2004-20220812-en
General
-
Target
0a97e814e98f8e6b2f27815e2b091316b8ed8f3e3af0d61391e1620507e81ade
-
Size
14KB
-
MD5
02d9698775ceb3a79fec9367705446e6
-
SHA1
f93ccb4c24a1dee460491ad4a0a368caffeced89
-
SHA256
0a97e814e98f8e6b2f27815e2b091316b8ed8f3e3af0d61391e1620507e81ade
-
SHA512
e156cbee0165c9b23a34caa37543b3f71c4950ed22ca551f6c2a5fe63bbe7ee7587f1996bf7d6f094c0cbe91bd17a053b382cb1d1fd50614d8bd64d2db4cbe24
-
SSDEEP
384:MurZTnhgfKcplxrccccjcOHqgrP/zmAO5Y:MurZTnmNjZrPnO5Y
Malware Config
Signatures
Files
-
0a97e814e98f8e6b2f27815e2b091316b8ed8f3e3af0d61391e1620507e81ade.dll windows x86
27bb3a0b36d51ecf46c158ade4cd93bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryA
CreateFileA
LoadLibraryExA
GlobalAlloc
GetModuleHandleA
Sleep
GetWindowsDirectoryA
WriteFile
CloseHandle
GetCurrentProcess
GetLastError
MultiByteToWideChar
lstrcatW
GlobalFree
DeviceIoControl
user32
wsprintfA
advapi32
DeleteService
RegCloseKey
LookupPrivilegeValueA
msvcrt
strstr
psapi
GetModuleFileNameExA
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 602B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ