Static task
static1
Behavioral task
behavioral1
Sample
12a3ede79874aacb1d0e79e409bc4bdd7e19f7dc41591162daef7313d569b473.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
12a3ede79874aacb1d0e79e409bc4bdd7e19f7dc41591162daef7313d569b473.dll
Resource
win10v2004-20221111-en
General
-
Target
12a3ede79874aacb1d0e79e409bc4bdd7e19f7dc41591162daef7313d569b473
-
Size
332KB
-
MD5
fc7e690f109f5ebe85ae229577abfffc
-
SHA1
cac6c01ef36b80d4ce98dca825ea13bdb80857d5
-
SHA256
12a3ede79874aacb1d0e79e409bc4bdd7e19f7dc41591162daef7313d569b473
-
SHA512
dd6c532e67c29822ccb64c64de05b0f981dc73d3a9f582c6cb006eae1f2397f894465a1b46b8c82a03c6d00859ee11338ed9dd5995100d3327254e172841c052
-
SSDEEP
3072:6OYyzOWrfyzAGow+k8Gt+XOiAAZ/5aNF16F7/hZ:6EOWrfyzAbwPiAAlo/Ez
Malware Config
Signatures
Files
-
12a3ede79874aacb1d0e79e409bc4bdd7e19f7dc41591162daef7313d569b473.dll windows x86
62d4b59ecf1ded08b863fb98434c2dd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc80u
ord1168
ord1170
ord1192
ord1200
ord581
ord1115
ord1162
ord1908
ord371
ord1093
ord1199
ord1197
ord1087
ord1033
ord1079
ord764
ord315
ord765
ord6751
ord314
msvcr80
_except_handler4_common
__CxxFrameHandler3
??2@YAPAXI@Z
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
free
_encoded_null
_malloc_crt
_encode_pointer
_crt_debugger_hook
kernel32
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
LocalFree
SetUnhandledExceptionFilter
IsDebuggerPresent
UnhandledExceptionFilter
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ