Static task
static1
Behavioral task
behavioral1
Sample
30e512422680aa5be0a91364ca57027bc10a82216b0beddf9a88f7b35ff389e8.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
30e512422680aa5be0a91364ca57027bc10a82216b0beddf9a88f7b35ff389e8.dll
Resource
win10v2004-20221111-en
General
-
Target
30e512422680aa5be0a91364ca57027bc10a82216b0beddf9a88f7b35ff389e8
-
Size
232KB
-
MD5
3214fa7280aaedb2b9414d19e1c2c5d9
-
SHA1
3b1b86efaa7b58b28f8feca2212cd51b903ec47b
-
SHA256
30e512422680aa5be0a91364ca57027bc10a82216b0beddf9a88f7b35ff389e8
-
SHA512
fbbfd6f239b7e0599919ec9836cbdea1389c7d1f5d3b06c8de93689d7188b6e18b285cbb380d3ab706b73f706a5af3116f3323b95a8fb0b8b7ae1b2d50b8c2b8
-
SSDEEP
6144:hDgf673saEJInXrkXiVfaDGZ8hbla+upDg9ioVy5w4l2jWHhX:hDrbuIXwXitaDG8i++cooVyD1H
Malware Config
Signatures
Files
-
30e512422680aa5be0a91364ca57027bc10a82216b0beddf9a88f7b35ff389e8.dll windows x86
02353288047d6d4cad4959423965fadc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
shell32
SHGetSpecialFolderPathW
Sections
.text Size: 225KB - Virtual size: 864KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE