_Tirls
Static task
static1
Behavioral task
behavioral1
Sample
3534f12fed91ca8377ff9b2b658301d0b5916e4d27a3959f2066d52dd3ab2f4b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3534f12fed91ca8377ff9b2b658301d0b5916e4d27a3959f2066d52dd3ab2f4b.dll
Resource
win10v2004-20221111-en
General
-
Target
3534f12fed91ca8377ff9b2b658301d0b5916e4d27a3959f2066d52dd3ab2f4b
-
Size
37KB
-
MD5
a8ca459be11daf988272ac5c26cf1d7c
-
SHA1
7d859138321dc206db3cb110b3d082ba7541abda
-
SHA256
3534f12fed91ca8377ff9b2b658301d0b5916e4d27a3959f2066d52dd3ab2f4b
-
SHA512
2181dcf09c944065f495ac8761374f31e079d54be2cca90b43be7f359d5b4cc7f805b20eb067891dd1096e2fefeef512bd7fe78e11bf1edb529cb9971348bfcf
-
SSDEEP
768:6iLj7ADRiYLbpV8xHv+ouGSV2XLyYhlPVHObJgu9TJ4:PHHYLr8mPGnLZFu2u9TJ
Malware Config
Signatures
Files
-
3534f12fed91ca8377ff9b2b658301d0b5916e4d27a3959f2066d52dd3ab2f4b.dll windows x86
1ea03e02e51d48332ec820bdb1f16ccb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetLastError
MultiByteToWideChar
RaiseException
RtlUnwind
SetConsoleCtrlHandler
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
LCMapStringA
GetStringTypeA
SetUnhandledExceptionFilter
GetStdHandle
WriteConsoleA
GetTimeZoneInformation
WaitForSingleObject
CreateSemaphoreA
ReleaseSemaphore
ExitProcess
GetTickCount
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
GetLocalTime
GetVersion
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
user32
MessageBoxA
Exports
Exports
Sections
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT$XIA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 28B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE