_Main@0
Static task
static1
Behavioral task
behavioral1
Sample
df1285024b1f7cf27a70e8384cc77729d1bf0d387929a608a872594f3ae1e004.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
df1285024b1f7cf27a70e8384cc77729d1bf0d387929a608a872594f3ae1e004.dll
Resource
win10v2004-20220901-en
General
-
Target
df1285024b1f7cf27a70e8384cc77729d1bf0d387929a608a872594f3ae1e004
-
Size
11KB
-
MD5
8f1e0171da20d4fa766cefbc0b2d0b12
-
SHA1
de11a019d1959884d1539e8eb6a0e02dfff28c0b
-
SHA256
df1285024b1f7cf27a70e8384cc77729d1bf0d387929a608a872594f3ae1e004
-
SHA512
c366d24c05a55ed92f1ee30b06634f4cca6e54c41db3320539b55984f4b0af51d75b90d807975ca53df18b0df2f072baf7c755595d75063153309e2d1cad4ba5
-
SSDEEP
192:4XoNSc57tNnE0eEdMKJCBHafMoAH8biCGDowHHPFBCiGhAzzN9qdH/K0:uR67tN1mKJuAMoU8biCQopi6DdHr
Malware Config
Signatures
Files
-
df1285024b1f7cf27a70e8384cc77729d1bf0d387929a608a872594f3ae1e004.dll windows x86
1930b6c526dee98925744362f865b1ad
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CreateFileA
GetFileSize
SetFilePointer
HeapAlloc
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
WriteFile
Sleep
CreateProcessA
ReadFile
FindFirstFileA
FindClose
MoveFileA
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetVersion
DeleteFileA
CreateThread
user32
GetWindowThreadProcessId
EnumChildWindows
GetDlgItem
GetWindowLongA
EnumWindows
CloseDesktop
GetClientRect
FindWindowExA
CreateDesktopA
GetClassNameA
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 922B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ