Static task
static1
Behavioral task
behavioral1
Sample
6f39c75e3fb702b0f1ae80501db7d85de3045b318978dcd0151943137de1cc43.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f39c75e3fb702b0f1ae80501db7d85de3045b318978dcd0151943137de1cc43.dll
Resource
win10v2004-20220812-en
General
-
Target
6f39c75e3fb702b0f1ae80501db7d85de3045b318978dcd0151943137de1cc43
-
Size
45KB
-
MD5
4558104b301328dffb619a65dd4f10bb
-
SHA1
6a6d3d647d684dd655a6d41163f96d239404ec2c
-
SHA256
6f39c75e3fb702b0f1ae80501db7d85de3045b318978dcd0151943137de1cc43
-
SHA512
9741336a1c6c15319633131978c468e71f44c22f4b10d8b5aa63f850f569aa760636eab9e6e838e5c192658d3ddf2d36726623d3d942f2ecb9515e2f3efbcd3e
-
SSDEEP
768:uZNCafAdUJ/jZfocYmqH1IyeQRYbjn6x4IsCK92Y+vSn5KWm4jyyiktQEjcBUdwE:uTdZfKiySjn6+T32rvS3AjEkU9sM
Malware Config
Signatures
Files
-
6f39c75e3fb702b0f1ae80501db7d85de3045b318978dcd0151943137de1cc43.dll windows x86
583a031fe7a445b20ecb5d9d5e24b4f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
VirtualProtect
GetCommandLineA
GetVersion
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
msvcrt
__CxxFrameHandler
_except_handler3
malloc
_initterm
free
_wcsicmp
_adjust_fdiv
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 670B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ