Static task
static1
Behavioral task
behavioral1
Sample
942417ecafad2726c4e326e2a3edd836d069d15abd76c5152a5f07cfdb96c767.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
942417ecafad2726c4e326e2a3edd836d069d15abd76c5152a5f07cfdb96c767.dll
Resource
win10v2004-20221111-en
General
-
Target
942417ecafad2726c4e326e2a3edd836d069d15abd76c5152a5f07cfdb96c767
-
Size
225KB
-
MD5
18127a694c415f2fd954787bc7fa26f2
-
SHA1
9bd32102d3a6719e74dd689e7a7c53a75e867536
-
SHA256
942417ecafad2726c4e326e2a3edd836d069d15abd76c5152a5f07cfdb96c767
-
SHA512
7f88123b0673e955c7d4a2e0e9272578c5074896bd2ae9fc3f9c1b93402e56e65a1d8c388dad8af0a89562a0f44145ae96c5510e9a0769df14dd7b58b81969a6
-
SSDEEP
3072:cXsFmtJ8sBR04y4kB8if9Ey86E9F6q6dvNMV6sPQNhdQ3/32Dhrlt7oMFfTmAGeP:cXkmorXEXc5/KQNnw32DhoSfTm5WbD
Malware Config
Signatures
Files
-
942417ecafad2726c4e326e2a3edd836d069d15abd76c5152a5f07cfdb96c767.dll windows x86
0006deb4a949aa4262d76896e40f4a50
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
lstrlenA
VirtualAlloc
LoadLibraryA
GetCommandLineA
IsBadHugeReadPtr
LoadLibraryExA
GetProcAddress
ExitProcess
GetModuleHandleA
ExitThread
GetCommandLineW
IsBadReadPtr
Sections
.text Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 1024B - Virtual size: 517B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ