pdqw
Static task
static1
Behavioral task
behavioral1
Sample
f37b3328387e55fd6498778bcdaf261bd4d63acfbdd63bfcba15d8d146257c72.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f37b3328387e55fd6498778bcdaf261bd4d63acfbdd63bfcba15d8d146257c72.dll
Resource
win10v2004-20220812-en
General
-
Target
f37b3328387e55fd6498778bcdaf261bd4d63acfbdd63bfcba15d8d146257c72
-
Size
89KB
-
MD5
d0292f2fc0718ac0a4c832241647f222
-
SHA1
d8e74ea9fee58818537e2a2a15358980205eafbe
-
SHA256
f37b3328387e55fd6498778bcdaf261bd4d63acfbdd63bfcba15d8d146257c72
-
SHA512
8ffc9cdd0a75f337a73372f1e9efda9c48b9c8b1fa350d11fcad2a3870fe2d02562ed384a9358ee522465840e46b140eb859b9861b827a728654f0bf45a9f7a6
-
SSDEEP
1536:/ViBLyWEWmWEudHC3Dc0RHwCFaBid3PV3j12Wl/0qKuB3cI:/VixysmWEMHCTpHlASPCWxf3x
Malware Config
Signatures
Files
-
f37b3328387e55fd6498778bcdaf261bd4d63acfbdd63bfcba15d8d146257c72.dll windows x86
994f61f0e7f3f826bca28c1cf77b2a82
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
Sleep
GetModuleHandleW
GetModuleHandleA
GetProcAddress
GetLastError
OpenProcess
CreateRemoteThread
GetCurrentProcess
SetUnhandledExceptionFilter
CloseHandle
UnhandledExceptionFilter
user32
CheckMenuItem
advapi32
AdjustTokenPrivileges
OpenProcessToken
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 590B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ