Static task
static1
Behavioral task
behavioral1
Sample
257a4b35b137c2d65d8ad5068eff300b564e425eb9867e6ccaa570913cc56a2b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
257a4b35b137c2d65d8ad5068eff300b564e425eb9867e6ccaa570913cc56a2b.dll
Resource
win10v2004-20220812-en
General
-
Target
257a4b35b137c2d65d8ad5068eff300b564e425eb9867e6ccaa570913cc56a2b
-
Size
175KB
-
MD5
1d1a5fd719f0f8aa8d3a5550f0c26a21
-
SHA1
d740e0a1f13c6c6f06494086e5f8a58a46615691
-
SHA256
257a4b35b137c2d65d8ad5068eff300b564e425eb9867e6ccaa570913cc56a2b
-
SHA512
37e0c38cb3a35844b788d4ce553549fb8adad3c16543c847a576b88569bbee22323fafe4922cef6180de34d5a2ff1ef3e7f7572934bbbce1f8689f4246eebf8b
-
SSDEEP
3072:3fMJnNY0NbK6Cy2EqjAE28kXuAjS/WNR4ajEuFsbJCToPH8kjMNjelVt7Q:kJnNY0BK65pxXuHELL4J+uHNsqz
Malware Config
Signatures
Files
-
257a4b35b137c2d65d8ad5068eff300b564e425eb9867e6ccaa570913cc56a2b.dll windows x86
0a36f3ad4f6732338cb6760d50dc7611
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
GetKeyboardType
MessageBoxA
advapi32
RegQueryValueExA
oleaut32
SysFreeString
Sections
a34qw3sd Size: - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
fasd4324 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fsda424s Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
03qd364 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
fsd42342 Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
kakaread Size: - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
klakfdd1 Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FUCKUS Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ