Static task
static1
Behavioral task
behavioral1
Sample
99cf7e7185784a5b4ee8fa38f6cb219427fc6379923aa8741fa88118043218c8.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
99cf7e7185784a5b4ee8fa38f6cb219427fc6379923aa8741fa88118043218c8.dll
Resource
win10v2004-20221111-en
General
-
Target
99cf7e7185784a5b4ee8fa38f6cb219427fc6379923aa8741fa88118043218c8
-
Size
45KB
-
MD5
a30c13787140b3d36a82df3e3cc4fd0b
-
SHA1
305b96842d69e31ba7f9bf24de6d1b554aff6578
-
SHA256
99cf7e7185784a5b4ee8fa38f6cb219427fc6379923aa8741fa88118043218c8
-
SHA512
159205f3aea3e05c8582da800401e79e0424d6c16900131fc65d4090076b6fece6bd4e4e9d4a5c366ece60f672263a989cd449a14cf464ec714b05633e793d6c
-
SSDEEP
768:7UcoQuIVsReEM+uBQMfU63r/OXukEUlFRrA74Cr+HNq121:/oQvGy+uiMsaCukEyh0hyH421
Malware Config
Signatures
Files
-
99cf7e7185784a5b4ee8fa38f6cb219427fc6379923aa8741fa88118043218c8.dll windows x86
e90d868e4b59be4ce00025b3510b8dfb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
GetModuleHandleA
VirtualProtect
CreateNamedPipeW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleHandleW
CreateProcessA
GetTempFileNameA
ole32
CoCreateInstance
CoUninitialize
user32
wsprintfA
msvfw32
ICInfo
shell32
SHGetFolderPathA
oleaut32
GetActiveObject
SafeArraySetRecordInfo
VarParseNumFromStr
VariantInit
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ