Static task
static1
Behavioral task
behavioral1
Sample
db3b219929b2de40188fe327160f72f816e2009673090a213ce607a3593e5e97.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db3b219929b2de40188fe327160f72f816e2009673090a213ce607a3593e5e97.dll
Resource
win10v2004-20221111-en
General
-
Target
db3b219929b2de40188fe327160f72f816e2009673090a213ce607a3593e5e97
-
Size
72KB
-
MD5
03aaaa67a81bf45b9c84804f8f77f0b9
-
SHA1
1b790252f36aca3fcd2bde52d84838a7d870b002
-
SHA256
db3b219929b2de40188fe327160f72f816e2009673090a213ce607a3593e5e97
-
SHA512
6bbf148aecd27dc1d47140df2f4d66223dcad6846130336fa8ed09d5ddfd0b4e44ecc351a42d5ed34449cd576f5e6b565f97701a43645cdaba1c788334ab71a9
-
SSDEEP
1536:/aJnN2kfuA7OiqMXuicTg9PMfDrzWlzta5SoOr:/aJngk2A7vqQu+PMf3+hdoOr
Malware Config
Signatures
Files
-
db3b219929b2de40188fe327160f72f816e2009673090a213ce607a3593e5e97.dll windows x86
17dbe6031075c77c589ea79ce3ebdad7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
VirtualProtect
RtlUnwind
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ