Static task
static1
Behavioral task
behavioral1
Sample
432c7deaa94233bb593355f3ecefc5acbc8e6359c1306bdac6c3c35c9655d07e.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
432c7deaa94233bb593355f3ecefc5acbc8e6359c1306bdac6c3c35c9655d07e.dll
Resource
win10v2004-20220812-en
General
-
Target
432c7deaa94233bb593355f3ecefc5acbc8e6359c1306bdac6c3c35c9655d07e
-
Size
131KB
-
MD5
439f446dbf3e1ac53b023dbc57f61150
-
SHA1
deb4c1b983ce4323c3ca5467d4b6756237c9bd66
-
SHA256
432c7deaa94233bb593355f3ecefc5acbc8e6359c1306bdac6c3c35c9655d07e
-
SHA512
c479f5a4083b67bf7cac8d20eae7305db4064703d2194ee89a06acb75a73018fde8d65d35293e0f4accfd1f592227d6249762ec51008942d0a892c51ea5ae99d
-
SSDEEP
3072:85iNSyHzZB2M1mzCLG9FpYHE/fhaQmMXJUZn:FTZsemmLEpYk/YM5U
Malware Config
Signatures
Files
-
432c7deaa94233bb593355f3ecefc5acbc8e6359c1306bdac6c3c35c9655d07e.dll windows x86
5e712a8b020c3800a0c6df4c47799b44
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileType
GetLocaleInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapCreate
HeapDestroy
HeapFree
InterlockedExchange
LCMapStringA
LCMapStringW
SetHandleCount
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
GetStartupInfoW
LoadLibraryW
GetSystemInfo
GetProcAddress
user32
MessageBoxA
EnableWindow
CharPrevW
LoadIconW
GetSysColor
GetDlgItem
CharNextW
GetSystemMetrics
CheckDlgButton
LoadIconA
gdi32
GetStockObject
advapi32
RegQueryValueExW
shell32
ShellExecuteA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
msvcrt
memset
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ