Static task
static1
Behavioral task
behavioral1
Sample
0f35e1ad1cc6c2f7ac8c1a50e462d73548d594cde59cfba2d03ed3a6e9d0a12b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0f35e1ad1cc6c2f7ac8c1a50e462d73548d594cde59cfba2d03ed3a6e9d0a12b.dll
Resource
win10v2004-20221111-en
General
-
Target
0f35e1ad1cc6c2f7ac8c1a50e462d73548d594cde59cfba2d03ed3a6e9d0a12b
-
Size
65KB
-
MD5
6c35eb26195aa4241419ba1e2dcd524e
-
SHA1
23fef4dbeda9b5e100a1bf4fc0cfa9a373416b8f
-
SHA256
0f35e1ad1cc6c2f7ac8c1a50e462d73548d594cde59cfba2d03ed3a6e9d0a12b
-
SHA512
353679500954dea140ca4604a2f423a486a7c4e91beb6557d8eca8dd6e03182ecabe601d671c788291da5a4942c4a8e1b31666d78d99edb6c56030dd424778c2
-
SSDEEP
1536:8Tq//724JfQTOc/35SlDrhGSXtfuLz+Inq5:8TE/724J4hBcDlGstbUq5
Malware Config
Signatures
Files
-
0f35e1ad1cc6c2f7ac8c1a50e462d73548d594cde59cfba2d03ed3a6e9d0a12b.dll windows x86
bb8dac29cdda5ac9af46bd7baef9121b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeResource
GetCurrentProcessId
GetFileTime
GetProcAddress
GetSystemTimeAsFileTime
HeapAlloc
HeapCreate
MulDiv
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
UnlockFile
lstrcatA
lstrcpynA
lstrlenA
user32
CallWindowProcA
DestroyMenu
DestroyWindow
GetWindowRect
IsDialogMessageA
IsWindow
IsWindowEnabled
IsWindowVisible
PostMessageA
PtInRect
RegisterClipboardFormatA
SetWindowPos
ValidateRect
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ