FXXZJC
Static task
static1
Behavioral task
behavioral1
Sample
cd905fdfa5b7b1491e0e1b0b2c456884eca312dca12012b0a6b835e520a674c1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd905fdfa5b7b1491e0e1b0b2c456884eca312dca12012b0a6b835e520a674c1.dll
Resource
win10v2004-20220901-en
General
-
Target
cd905fdfa5b7b1491e0e1b0b2c456884eca312dca12012b0a6b835e520a674c1
-
Size
160KB
-
MD5
32bf3157e9ffff2a641fff74a288c1e0
-
SHA1
60dd6511102ec73f3c4cd4d1deb87fe2d14f28ce
-
SHA256
cd905fdfa5b7b1491e0e1b0b2c456884eca312dca12012b0a6b835e520a674c1
-
SHA512
d53d2250a61e36a54d1bab64086f77e1b8684cfd622cb4dd4bec891708392a21e42591f3704468efaaedc19a99697d8ff1401bd819572481a74607bbfef05bdc
-
SSDEEP
3072:APRtOWPa+9yuVWRaS2Y8qoQoRvTFaJ/c4w91MTAc5RTAqce:IRtra+XrSR8DZTsP1TA2Rx
Malware Config
Signatures
Files
-
cd905fdfa5b7b1491e0e1b0b2c456884eca312dca12012b0a6b835e520a674c1.dll windows x86
7cee449df4cd5205f8db0a2c4b081bce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
RtlUnwind
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
ReadFile
SetStdHandle
SetFilePointer
FlushFileBuffers
CloseHandle
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ