func
Static task
static1
Behavioral task
behavioral1
Sample
64ad8f96ee43b67163d0947c8a98c2d0fe631cf143174b017a8c1232280abd73.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
64ad8f96ee43b67163d0947c8a98c2d0fe631cf143174b017a8c1232280abd73.dll
Resource
win10v2004-20220812-en
General
-
Target
64ad8f96ee43b67163d0947c8a98c2d0fe631cf143174b017a8c1232280abd73
-
Size
216KB
-
MD5
08e418d54d68027fde5d99d56b00a840
-
SHA1
4bc8ed430cc83bc4d15c9d362914019ace3b19ae
-
SHA256
64ad8f96ee43b67163d0947c8a98c2d0fe631cf143174b017a8c1232280abd73
-
SHA512
bfececa5f932d6cc357b08a75859fc434892035264955ef544ad24d0bd418bfab443a8ccc50c894c06a05cfc6f3ef6f85d4d2dade1c8c94f4f25ca1340d29eec
-
SSDEEP
3072:PdNbMJwVruvgpOadDXmORDOU0I1erU5m4mITRGunkUYEre7xPgpwi84FquAA+ybO:DVru67dDXhF11erUIITznNBSi84Kr8V
Malware Config
Signatures
Files
-
64ad8f96ee43b67163d0947c8a98c2d0fe631cf143174b017a8c1232280abd73.dll windows x86
7c2c32bf67f3f93191223cc710f14f69
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadStringA
advapi32
LookupPrivilegeValueA
ole32
CoCreateInstance
oleaut32
VariantClear
wininet
InternetCloseHandle
iphlpapi
GetAdaptersInfo
Exports
Exports
Sections
.text Size: 198KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE