a
Static task
static1
Behavioral task
behavioral1
Sample
13467bc73013b1eea59d93ccdb50f68d7fcfbf399efc3d555dc740eefc2cae11.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13467bc73013b1eea59d93ccdb50f68d7fcfbf399efc3d555dc740eefc2cae11.dll
Resource
win10v2004-20221111-en
General
-
Target
13467bc73013b1eea59d93ccdb50f68d7fcfbf399efc3d555dc740eefc2cae11
-
Size
68KB
-
MD5
207e7da0bd042e299b04d41e50103790
-
SHA1
9aaaa5e1e118561a85f1feb3eaf5d361d7919ef8
-
SHA256
13467bc73013b1eea59d93ccdb50f68d7fcfbf399efc3d555dc740eefc2cae11
-
SHA512
f63fa198b193c5144dc9690061dd8641209ebe0ba18767b672d1107583bbd688f831fa0226d6647abc02e94b8c3587a43637307df1b3b14dfc30f033ee45a8e9
-
SSDEEP
1536:rH152MzcejV7/KlXJ61bHvJCmPhAlvGGlLkbZ:rVsu3pNPDZAlvS
Malware Config
Signatures
Files
-
13467bc73013b1eea59d93ccdb50f68d7fcfbf399efc3d555dc740eefc2cae11.dll windows x86
39d7ca2f2dddedb657c9fb533db4061f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
OpenProcess
ReadProcessMemory
HeapFree
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
SetFilePointer
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
GetLocaleInfoA
GetCPInfo
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE