HeaderIn
Static task
static1
Behavioral task
behavioral1
Sample
4338db9333a513c4c18253f8dc9429ac67d74bd47154d578123c4641666db47b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4338db9333a513c4c18253f8dc9429ac67d74bd47154d578123c4641666db47b.dll
Resource
win10v2004-20220812-en
General
-
Target
4338db9333a513c4c18253f8dc9429ac67d74bd47154d578123c4641666db47b
-
Size
173KB
-
MD5
47aea32255a717cbfdd3e087a0d33db9
-
SHA1
8e3b65b436319ae9830ed0534e280601d3c51d5a
-
SHA256
4338db9333a513c4c18253f8dc9429ac67d74bd47154d578123c4641666db47b
-
SHA512
e2a2a1c8b90311b1cb4f7aae77d7e7998cb86c222722087020c68260a199445942eace51afd269250cdb6a9b63110c698503d11a5b24cc4be73ba33ef2c79efe
-
SSDEEP
3072:mNIVzMQuJrzNxgsU4or7EVhEVGH2QKnYeogFH+oXI1qilAAezX0q/3eto:mNGzM3xfU4a7EV20aYeoDHXlAhzUa
Malware Config
Signatures
Files
-
4338db9333a513c4c18253f8dc9429ac67d74bd47154d578123c4641666db47b.dll windows x64
1b8ef92b843b4907416f06a0be59cc11
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcmpiW
PulseEvent
LocalAlloc
LocalFree
GlobalLock
GlobalAlloc
GlobalFree
GlobalHandle
DisableThreadLibraryCalls
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CompareStringW
GetLocaleInfoW
GetACP
MultiByteToWideChar
WideCharToMultiByte
GetDateFormatW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
lstrcpynW
GetWindowsDirectoryW
GetModuleHandleW
lstrlenW
GetModuleFileNameW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
RtlCaptureContext
winmm
GetDriverModuleHandle
DefDriverProc
Exports
Exports
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ