fx
Static task
static1
Behavioral task
behavioral1
Sample
300ac13ba30fc8b05e7adc75ec2783fffc36cba1c4296500bd9f91d67e0f2d6d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
300ac13ba30fc8b05e7adc75ec2783fffc36cba1c4296500bd9f91d67e0f2d6d.dll
Resource
win10v2004-20221111-en
General
-
Target
300ac13ba30fc8b05e7adc75ec2783fffc36cba1c4296500bd9f91d67e0f2d6d
-
Size
12KB
-
MD5
294c55756d7a530ae0c5e8d6c8e1a75d
-
SHA1
6297d7f0a425a1c08fd3c6f454ebd7805cd137d7
-
SHA256
300ac13ba30fc8b05e7adc75ec2783fffc36cba1c4296500bd9f91d67e0f2d6d
-
SHA512
281b2e7fda73c21739dbc3bf2de728558a8af1917427bacc4e7e87e372b505afc440a5e88402562ccc1a92e940baf2effe1fe75a6d5deb5ffbf5a2dcdf51aac6
-
SSDEEP
192:emx0ndfH5cY3L0ozq++PfMFK/tKGzSUGZG5k/tYcBgfPEsG+EWAqMD:AndRr3LBr+PfBjzSJDRB1+EWAv
Malware Config
Signatures
Files
-
300ac13ba30fc8b05e7adc75ec2783fffc36cba1c4296500bd9f91d67e0f2d6d.dll windows x86
eed4e000dc7ec3571925f9d41c63c80b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetCurrentProcess
ReadProcessMemory
WriteProcessMemory
Sleep
SetLocalTime
GetLocalTime
GetLastError
CreateMutexA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
IsBadReadPtr
GetCommandLineA
GlobalFree
GlobalLock
GlobalAlloc
GetPrivateProfileStringA
GetCurrentThread
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
user32
GetKeyboardState
SetWindowsHookExA
CallNextHookEx
GetAsyncKeyState
ToUnicode
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
msvcrt
_adjust_fdiv
malloc
_stricmp
_initterm
free
fread
memcpy
strstr
fclose
fopen
??3@YAXPAX@Z
memset
strlen
strrchr
strcmp
strcat
sprintf
strcpy
??2@YAPAXI@Z
strncpy
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdt Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 990B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ