Static task
static1
Behavioral task
behavioral1
Sample
f8162dbb2c6c055a7a1c01b0611a02d159aee1de5ddca784c95f5e8ee578a84b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f8162dbb2c6c055a7a1c01b0611a02d159aee1de5ddca784c95f5e8ee578a84b.dll
Resource
win10v2004-20221111-en
General
-
Target
f8162dbb2c6c055a7a1c01b0611a02d159aee1de5ddca784c95f5e8ee578a84b
-
Size
232KB
-
MD5
8eca920b063e5803052fef78b08d6dd4
-
SHA1
766bccf4a50c6b415505021457ec1d1f1eb7caab
-
SHA256
f8162dbb2c6c055a7a1c01b0611a02d159aee1de5ddca784c95f5e8ee578a84b
-
SHA512
b9931137749cec20b6902b215608972a65e1390ca10f5f440d70aefe43ac24ded94ee72aaf33a5c4ca9671f68b2dffa22d03f70695f3b1073e173d055a7202fe
-
SSDEEP
6144:H3gHybp8RwtHdz1yT+kTz7//O6CJPSrvINA:D+icTFXD/UPS
Malware Config
Signatures
Files
-
f8162dbb2c6c055a7a1c01b0611a02d159aee1de5ddca784c95f5e8ee578a84b.dll windows x86
02353288047d6d4cad4959423965fadc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
shell32
SHGetSpecialFolderPathW
Sections
.text Size: 225KB - Virtual size: 864KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE