Prkt
Static task
static1
Behavioral task
behavioral1
Sample
f4e11f1fb4063ad6be9d66ae92fd8553e28f70153d810625b27cbc6816bbb0c9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4e11f1fb4063ad6be9d66ae92fd8553e28f70153d810625b27cbc6816bbb0c9.dll
Resource
win10v2004-20220812-en
General
-
Target
f4e11f1fb4063ad6be9d66ae92fd8553e28f70153d810625b27cbc6816bbb0c9
-
Size
14KB
-
MD5
461849798eacdbea6416fb933fac94f0
-
SHA1
0d502798bb79bd739d8c67791f3398cf3b1f4361
-
SHA256
f4e11f1fb4063ad6be9d66ae92fd8553e28f70153d810625b27cbc6816bbb0c9
-
SHA512
4f4ee2f8e2ee4dba25360340aed50903109d9d615acc7f3733fcd5ab65bd58531506080d4de70226745040332eb5222dff3c6e1cc82f20d81126d901daeffcaf
-
SSDEEP
48:yd2uaKeIymDY1/QGrvq0JuP+HmffuBeuR5cAKuUH:nunFk/vFJfmffuPR55U
Malware Config
Signatures
Files
-
f4e11f1fb4063ad6be9d66ae92fd8553e28f70153d810625b27cbc6816bbb0c9.dll windows x86
7b14debe34ef27ced8370673ed8b0b41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
kernel32
GlobalAlloc
LoadLibraryA
MultiByteToWideChar
GetWindowsDirectoryA
Sleep
lstrcatA
lstrcpyA
lstrlenA
GetVersion
GetTickCount
GetProcAddress
GetFullPathNameA
GetCurrentProcess
ExitProcess
DeleteCriticalSection
gdi32
GetDeviceCaps
GetDIBColorTable
GetDCOrgEx
ExtTextOutA
CreateHalftonePalette
CreateEnhMetaFileA
CreateDIBitmap
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetDIBits
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 895B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 306B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ