Static task
static1
Behavioral task
behavioral1
Sample
8f81b165e040a299e982cfa49c25bf37a8005db18524d694ba4095215f6a620d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f81b165e040a299e982cfa49c25bf37a8005db18524d694ba4095215f6a620d.dll
Resource
win10v2004-20221111-en
General
-
Target
8f81b165e040a299e982cfa49c25bf37a8005db18524d694ba4095215f6a620d
-
Size
444KB
-
MD5
0a929c8f5e029031f9e0681a66752d54
-
SHA1
efcc777d72a1eaed77605a7188ed4e85ede2a50a
-
SHA256
8f81b165e040a299e982cfa49c25bf37a8005db18524d694ba4095215f6a620d
-
SHA512
2f82a7245114b0f7afc27a126b4c0214b198f0a35a85b8f8a9b2e2f4d71b6f368aef984afd04e88505f4e124953bf44653e9fab80116a614c95ce34686da2bab
-
SSDEEP
6144:1r5s5usc47BV2zUarncqMU9UHwlUOhPRj:1luU41Vbarn10BO1Rj
Malware Config
Signatures
Files
-
8f81b165e040a299e982cfa49c25bf37a8005db18524d694ba4095215f6a620d.dll windows x86
84ceb30da17b0cebf228f2a55559a78a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
Shell_NotifyIconA
SHGetFolderPathA
kernel32
lstrlenA
LocalAlloc
GetACP
LoadLibraryExA
GetProcAddress
GetModuleHandleA
VirtualAlloc
ExitProcess
GetCommandLineA
GetCommandLineW
IsBadReadPtr
GetOEMCP
ExitThread
msvcrt
srand
strlen
cos
pow
Sections
.text Size: 276KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ