Static task
static1
Behavioral task
behavioral1
Sample
8c4195a575a7180910d660ff485fcae318acde313b6d5f3a23c0b0f16a498290.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c4195a575a7180910d660ff485fcae318acde313b6d5f3a23c0b0f16a498290.dll
Resource
win10v2004-20220901-en
General
-
Target
8c4195a575a7180910d660ff485fcae318acde313b6d5f3a23c0b0f16a498290
-
Size
155KB
-
MD5
0f923cdf5f2f66055ff9c6bf03af6ba4
-
SHA1
02e394ae4aa2d29125a7dbc71f5c84e0542c6517
-
SHA256
8c4195a575a7180910d660ff485fcae318acde313b6d5f3a23c0b0f16a498290
-
SHA512
42142a857c8ed61d65e3a8ea0484bc18f1459980af30dddf79efd19b64ce17126a7e6bfdffca89e60a1fd81df31528e7c7244244f651b69ad7be7b1a7465f2b8
-
SSDEEP
3072:k3vpdwqeAZzCuiHf+Zfpx+ODxE/S20fNvqieD65M62Q0WwLaMqjKyQb9uqFcsxMZ:fQxPdEK2+8DYM62QELaH5+wvUne
Malware Config
Signatures
Files
-
8c4195a575a7180910d660ff485fcae318acde313b6d5f3a23c0b0f16a498290.dll windows x86
04d39a169784fa966c5251fb3e5c65c6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetUserDefaultLCID
MulDiv
GetProcAddress
QueryPerformanceFrequency
VirtualAlloc
VirtualProtect
LoadLibraryA
IsDBCSLeadByte
GetACP
GetSystemTimeAsFileTime
Sleep
GetProcessHeap
GetComputerNameA
GetCurrentThreadId
IsBadCodePtr
GetLocalTime
user32
GetGUIThreadInfo
IsZoomed
GetTopWindow
GetWindowThreadProcessId
GetWindow
GetClientRect
WindowFromDC
GetForegroundWindow
GetParent
GetDesktopWindow
IsChild
IsMenu
InSendMessage
GetDlgItem
CopyIcon
GetTitleBarInfo
advapi32
GetUserNameA
InitializeSecurityDescriptor
IsValidSecurityDescriptor
RevertToSelf
msvcrt
rand
_ultoa
srand
_adjust_fdiv
malloc
_initterm
free
_memicmp
memchr
time
floor
_hypot
_pctype
_isctype
modf
ldexp
frexp
__mb_cur_max
__doserrno
_CIcosh
ldiv
_ltoa
_set_error_mode
_swab
gdi32
GetPixel
GdiGetBatchLimit
GetBkMode
GetStretchBltMode
ole32
CoDosDateTimeToFileTime
CoFileTimeNow
shell32
ord680
ord66
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ