Static task
static1
Behavioral task
behavioral1
Sample
ae054a56706efc838ee65a308f35a1c9aed6dd3e367bfe7b27016903b6ad6d1f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ae054a56706efc838ee65a308f35a1c9aed6dd3e367bfe7b27016903b6ad6d1f.dll
Resource
win10v2004-20221111-en
General
-
Target
ae054a56706efc838ee65a308f35a1c9aed6dd3e367bfe7b27016903b6ad6d1f
-
Size
18KB
-
MD5
c28d53a1ef66519155a74b6cf8c15f1e
-
SHA1
c1121123d5a1d3155f415ff0f5497a5c49a26bf1
-
SHA256
ae054a56706efc838ee65a308f35a1c9aed6dd3e367bfe7b27016903b6ad6d1f
-
SHA512
85d3b71c2d5e2931392cd18695f52db5824f1bf606dd68a0b37f1eb9e09a9c581cdec81f1e5c3a06e020ddaa01966f9ad3cfb712d155c9ce62a3a04261023765
-
SSDEEP
384:7Tkg8B2/yaqOiFR2AHLCz1wz5qOrPtJtExJlm6:7T58yXBiFR7W85qOrPtjl6
Malware Config
Signatures
Files
-
ae054a56706efc838ee65a308f35a1c9aed6dd3e367bfe7b27016903b6ad6d1f.dll windows x86
3855d896f8c8d800a28a6558ec7f1f89
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileW
DeleteCriticalSection
EnterCriticalSection
FreeEnvironmentStringsW
GetCommandLineW
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetTempPathW
GetTickCount
GetVersionExW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
UnhandledExceptionFilter
VirtualProtect
lstrlenW
InitializeCriticalSection
user32
GetDC
LoadAcceleratorsA
LoadCursorA
LoadIconA
RegisterClassA
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
SetServiceStatus
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
ulib
??0STRING_ARGUMENT@@QAE@XZ
ntdll
RtlFreeHeap
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ