Static task
static1
Behavioral task
behavioral1
Sample
686271825fa1ef900349b97a0b27d3ab1f6a42fb18628f28f42b31bd0e6e607e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
686271825fa1ef900349b97a0b27d3ab1f6a42fb18628f28f42b31bd0e6e607e.dll
Resource
win10v2004-20221111-en
General
-
Target
686271825fa1ef900349b97a0b27d3ab1f6a42fb18628f28f42b31bd0e6e607e
-
Size
232KB
-
MD5
7951b206575692c4b09810c9a226b5a5
-
SHA1
81f8395770d2c5f84f3cdfab9e45d3c19d461fd2
-
SHA256
686271825fa1ef900349b97a0b27d3ab1f6a42fb18628f28f42b31bd0e6e607e
-
SHA512
a12db8676fb9e68fc4db3ee6ea9ab8d7f04e8dc35d798271e47a18c3553e4c4a79f61a02023a0b12050791847e69d12fd9bb6daabcd2f7d9a2f33d40312ae2bb
-
SSDEEP
6144:U5JBqxF217qxs4fBgreR/V01dFBrjiQr5T3UFwIqlAXkZz:U5+Q17KNgK/mLviu13UFwIql7z
Malware Config
Signatures
Files
-
686271825fa1ef900349b97a0b27d3ab1f6a42fb18628f28f42b31bd0e6e607e.dll windows x86
02353288047d6d4cad4959423965fadc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
shell32
SHGetSpecialFolderPathW
Sections
.text Size: 225KB - Virtual size: 864KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE