_ExitWindowsExExitWindowsEx@0
Static task
static1
Behavioral task
behavioral1
Sample
a12c88db4d0b95191e0fb5e84edf5d9920e442aa0d0286a06df16981d216becb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a12c88db4d0b95191e0fb5e84edf5d9920e442aa0d0286a06df16981d216becb.dll
Resource
win10v2004-20221111-en
General
-
Target
a12c88db4d0b95191e0fb5e84edf5d9920e442aa0d0286a06df16981d216becb
-
Size
55KB
-
MD5
add2a37d0143015271c2c85b31dc0b20
-
SHA1
13e1acac0132c8b0640a648dc4f8cfbe76edc1f1
-
SHA256
a12c88db4d0b95191e0fb5e84edf5d9920e442aa0d0286a06df16981d216becb
-
SHA512
092040e179515e0e4647cce0a148b4ef91cd1ac600e0c3d30e57eb3f2ef4911f15909b1627a89364f5ad2960372f6ddb98e3c418f507605421aeef362d1610e3
-
SSDEEP
768:x53T3/1ExtXMjpe0kQSRfRFp1hKpfhQtiHCdv0u/cioIQRAA9KFiCfYToEwaDsbc:vj3nU02fDhKptkv0uCqb2
Malware Config
Signatures
Files
-
a12c88db4d0b95191e0fb5e84edf5d9920e442aa0d0286a06df16981d216becb.dll windows x86
a06acd8560019d0f2d0d96dcde270a7e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
AddAtomW
GetFileAttributesW
GlobalFree
lstrcmpA
LoadLibraryW
GlobalFlags
DeleteFileW
GetFileType
IsDBCSLeadByte
GetCurrentDirectoryW
lstrcatW
GetLocalTime
LocalUnlock
GetAtomNameW
shlwapi
PathAddBackslashA
Exports
Exports
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ