oleCommsTask
Static task
static1
Behavioral task
behavioral1
Sample
2a48fbd31409e1dc095060f9019499d7dd35d140e6ccbb163459ada53bcc2371.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2a48fbd31409e1dc095060f9019499d7dd35d140e6ccbb163459ada53bcc2371.dll
Resource
win10v2004-20220812-en
General
-
Target
2a48fbd31409e1dc095060f9019499d7dd35d140e6ccbb163459ada53bcc2371
-
Size
144KB
-
MD5
0d5ce326795d42eafef79c401d3ae62b
-
SHA1
983242315036f53e88b290495764acebbbbd04e4
-
SHA256
2a48fbd31409e1dc095060f9019499d7dd35d140e6ccbb163459ada53bcc2371
-
SHA512
97180f5376ef326e309abd32eb78a27a0652eca08cfcf7c0534eb94da6c1e88f842025b7d576f761353819e4e5633d004ec657f4f112274f39f9c9a072ae4bb3
-
SSDEEP
3072:+598g1OMDAfn93CKCjiVk+F2jOhs4bZa37gwMWO6apBsiiOcg8CyM:S8g1OCAfpCTGVkEVa3swpWBVP
Malware Config
Signatures
Files
-
2a48fbd31409e1dc095060f9019499d7dd35d140e6ccbb163459ada53bcc2371.dll windows x86
b555135b5cad724cd761c5d764215c83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetCommandLineA
GetLastError
LoadLibraryA
Sleep
CreateProcessA
UnmapViewOfFile
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
EnterCriticalSection
ole32
CreateBindCtx
CoInitialize
CoUninitialize
user32
SetTimer
DefWindowProcA
PostQuitMessage
GetSystemMetrics
PostMessageA
RegisterWindowMessageA
GetParent
TranslateMessage
SendMessageA
KillTimer
FindWindowA
advapi32
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
Exports
Exports
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 979B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ