?CloseWindowStationCloseWi
Static task
static1
Behavioral task
behavioral1
Sample
80fa8898285a809854bd607712772373761058b463aa58053f01ae614a72a122.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80fa8898285a809854bd607712772373761058b463aa58053f01ae614a72a122.dll
Resource
win10v2004-20221111-en
General
-
Target
80fa8898285a809854bd607712772373761058b463aa58053f01ae614a72a122
-
Size
52KB
-
MD5
fada5a6806c3bc931d1f6d7b996abe1e
-
SHA1
635f0be6f5b9f14c60cf8f84ac582d747c23b3c9
-
SHA256
80fa8898285a809854bd607712772373761058b463aa58053f01ae614a72a122
-
SHA512
82fc913915705bfeb983a58a807593a7a85b9ff01c44160c04ae9f742bc4e5abe80c0b0800874210d1020247a2772a5a8c77a50af984d1bc174726a95b08c483
-
SSDEEP
768:UyFy6JxWxAZa5so1qZ2GNS+GbNNgX64dRY1Orfx6/1oKKzQ322GdguC:Ux6JIh5XqjS+yNud21Obxy1oKp
Malware Config
Signatures
Files
-
80fa8898285a809854bd607712772373761058b463aa58053f01ae614a72a122.dll windows x86
60490a30aa1626c5d13b2f7f489fcfb5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowPos
MoveWindow
DestroyMenu
kernel32
GetCPInfo
GlobalGetAtomNameA
SetNamedPipeHandleState
EnumResourceTypesA
GetModuleFileNameW
GetLocaleInfoA
GetTempFileNameW
GetLongPathNameW
AddAtomA
GetFileAttributesExA
FindNextFileA
OpenFileMappingA
CreateDirectoryA
GetNumberFormatA
lstrlenW
SetHandleCount
GlobalMemoryStatus
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vars4 Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vptr4 Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ