Static task
static1
Behavioral task
behavioral1
Sample
69ef01ae3aa446516aebd6c2005102139a44a2d8770727dfff3ec49e8a63b815.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
69ef01ae3aa446516aebd6c2005102139a44a2d8770727dfff3ec49e8a63b815.dll
Resource
win10v2004-20221111-en
General
-
Target
69ef01ae3aa446516aebd6c2005102139a44a2d8770727dfff3ec49e8a63b815
-
Size
228KB
-
MD5
aee43c1fdb354d853f7e821152c55d50
-
SHA1
f1d572173ad2c420900ecff8deabd50b6d52bd1a
-
SHA256
69ef01ae3aa446516aebd6c2005102139a44a2d8770727dfff3ec49e8a63b815
-
SHA512
c498ad0fc092b9d3cdc8060e73ef953a1317b24916d2414bf50d1f8ddccd9c4bbc72983b615ce40a8a3664dad163e5114744bcddb290e006da462825aa4db207
-
SSDEEP
6144:CbE4v95txJByGbtWXVPx4vpjAhOy3yKluYX:X4v95LyiYGjA5L
Malware Config
Signatures
Files
-
69ef01ae3aa446516aebd6c2005102139a44a2d8770727dfff3ec49e8a63b815.dll windows x86
fda5af3dd8fcdad84c25ebd5b3b03228
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetWindowThreadProcessId
advapi32
RegCloseKey
shell32
ShellExecuteExA
shlwapi
PathRemoveFileSpecA
wininet
HttpSendRequestA
netapi32
Netbios
Sections
.text Size: 63KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE