Static task
static1
Behavioral task
behavioral1
Sample
15c1801217878eed48f63a05cbdf36f8df5d708bc42e09253e9263e12690eb39.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
15c1801217878eed48f63a05cbdf36f8df5d708bc42e09253e9263e12690eb39.dll
Resource
win10v2004-20220812-en
General
-
Target
15c1801217878eed48f63a05cbdf36f8df5d708bc42e09253e9263e12690eb39
-
Size
205KB
-
MD5
27006d0d0830a0963cb5852c0d605da9
-
SHA1
0db38051c49b58405e9b368ab4dc0f981657aa50
-
SHA256
15c1801217878eed48f63a05cbdf36f8df5d708bc42e09253e9263e12690eb39
-
SHA512
a67fcd0832301d5094fe7c4b97ca5358c6dc9fdcf80f3814aef8362920006f4d445d454a2c790d16fba9bf236a048b159c131af17c5cad2a6fc9c1a4c808df32
-
SSDEEP
6144:cJBn7eCZldeWZZcqXbOd+z6lj3Mhq3K3UWZWznbBK5:cJBnq87dXbOuw3Mhq3O5ZWznA5
Malware Config
Signatures
Files
-
15c1801217878eed48f63a05cbdf36f8df5d708bc42e09253e9263e12690eb39.dll windows x86
9ab5ed07b21c8d240ac6006de56177f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
ReadConsoleA
OpenFile
GlobalFree
OpenFileMappingA
GetLastError
DeleteFileW
Sleep
ExitThread
ReadFile
CreateThread
GetFileTime
CopyFileExW
ReadConsoleW
DeleteFileA
CreateProcessA
GetCPInfo
Sections
.tls Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 535B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ