Static task
static1
Behavioral task
behavioral1
Sample
cf44d7feb6dd07f0582bd75c933480e126d334cac6a9f35d4cbcded17516becf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf44d7feb6dd07f0582bd75c933480e126d334cac6a9f35d4cbcded17516becf.dll
Resource
win10v2004-20220812-en
General
-
Target
cf44d7feb6dd07f0582bd75c933480e126d334cac6a9f35d4cbcded17516becf
-
Size
61KB
-
MD5
03d88d4db1f473a36e79081ea89db090
-
SHA1
aa0f58cd88be53f60485c6e2ab628338c4177cda
-
SHA256
cf44d7feb6dd07f0582bd75c933480e126d334cac6a9f35d4cbcded17516becf
-
SHA512
90a9e898c957a7f8dd339535b9208fee60046138e7174de46ed099c5e10f22b729b5f31e7b57bbde454f964d6505e1333d782bdefe1b186bb43f5be3f4cb750e
-
SSDEEP
1536:R0UDIgo9KEvnkFItL4Jg2/tZyxOfi48hbmIC/hAm:09fnkFCqD/+ci4UbmICKm
Malware Config
Signatures
Files
-
cf44d7feb6dd07f0582bd75c933480e126d334cac6a9f35d4cbcded17516becf.dll windows x86
e5845586619cd590492166aa65d93858
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetLastError
MultiByteToWideChar
IsValidCodePage
GlobalFree
InterlockedExchange
InterlockedCompareExchange
GlobalAlloc
DisableThreadLibraryCalls
LeaveCriticalSection
EnterCriticalSection
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersion
VirtualProtect
GetCommandLineA
Sleep
user32
GetWindowLongW
SetWindowLongW
gdi32
SetWindowOrgEx
DeleteDC
ExtTextOutW
TranslateCharsetInfo
GetObjectType
GetTextCharacterExtra
GetLayout
GetTextAlign
SetTextAlign
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetMapMode
GetGlyphIndicesW
SelectObject
DeleteObject
rpcrt4
NdrDllGetClassObject
msvcrt
malloc
_XcptFilter
_amsg_exit
__CxxFrameHandler
_except_handler3
free
_initterm
_adjust_fdiv
qsort
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ