LevelSetup
Static task
static1
Behavioral task
behavioral1
Sample
bd67e76bff82d93c64287869bcc311dd3a5e26fd4601db57f19033bf185695ed.dll
Resource
win7-20220901-en
General
-
Target
bd67e76bff82d93c64287869bcc311dd3a5e26fd4601db57f19033bf185695ed
-
Size
144KB
-
MD5
06f218b24a07c0727346e14f7eb9b5c0
-
SHA1
4d046e2c61a74055a2d4bf8dad587f25ef02f20f
-
SHA256
bd67e76bff82d93c64287869bcc311dd3a5e26fd4601db57f19033bf185695ed
-
SHA512
ea51b9cd8ca7c777f8fdd5a2bfc74ac444851ae9e847443478b0bcc34f1a4a726a4886cfb551f6d1845a493f62af35d8ae45013efc00309f842d269d1216809c
-
SSDEEP
3072:Otq+xjMyxBtwNrwDn/OhWH7YMogNnHeyJQ6ZJj1D:Jy7te+OgH7rdRTF
Malware Config
Signatures
Files
-
bd67e76bff82d93c64287869bcc311dd3a5e26fd4601db57f19033bf185695ed.dll windows x86
bd27b5be3236a9fd570dc36615a4644c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetVersionExA
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
UnhandledExceptionFilter
DisableThreadLibraryCalls
WriteFile
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
VirtualProtect
GetSystemInfo
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE