Static task
static1
Behavioral task
behavioral1
Sample
029295058dfcc092ac0ba0a9d578baf38ded02549cf132a562e0f31d189777a5.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
029295058dfcc092ac0ba0a9d578baf38ded02549cf132a562e0f31d189777a5.dll
Resource
win10v2004-20221111-en
General
-
Target
029295058dfcc092ac0ba0a9d578baf38ded02549cf132a562e0f31d189777a5
-
Size
232KB
-
MD5
3a1afa7a1693ea28dea82f14314fdef2
-
SHA1
482d42ef51c3842cad26c6b51e2e762446cdb142
-
SHA256
029295058dfcc092ac0ba0a9d578baf38ded02549cf132a562e0f31d189777a5
-
SHA512
73add1ae564c5c53896f07251b1b0292c15d5c5642a8dba15a1e038bc498dcd7dd0cc6b8b939ec327fc97d78992be60c79d2ae21acc70c1c45ce27ddb1319c3a
-
SSDEEP
6144:hM0b4o4IoBC8POMRoXquNGBJisskIliy+GlCqO:y0b7oB46qGfipkIliy+G5O
Malware Config
Signatures
Files
-
029295058dfcc092ac0ba0a9d578baf38ded02549cf132a562e0f31d189777a5.dll windows x86
02353288047d6d4cad4959423965fadc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
shell32
SHGetSpecialFolderPathW
Sections
.text Size: 225KB - Virtual size: 864KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE