Static task
static1
Behavioral task
behavioral1
Sample
79d144e23f3c4d13267ab5aa7a34d37ddcadd6811c34973011f4abd818b26f08.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79d144e23f3c4d13267ab5aa7a34d37ddcadd6811c34973011f4abd818b26f08.dll
Resource
win10v2004-20220901-en
General
-
Target
79d144e23f3c4d13267ab5aa7a34d37ddcadd6811c34973011f4abd818b26f08
-
Size
191KB
-
MD5
d0f7fb90f48ca00663b9fd3dedb3f490
-
SHA1
71f9411e056b0cd8a3698c92e03947034a796542
-
SHA256
79d144e23f3c4d13267ab5aa7a34d37ddcadd6811c34973011f4abd818b26f08
-
SHA512
382ad9d67afd437817dff53ebab7ffe23a451a6fbea9c83d6bde4d8a9e017c656f4c2988a621c3f04f8fbdd059026699518af91d1f1f123b9b337bef1174f852
-
SSDEEP
3072:7xWapteGm5S3BRYJavUH5CvTHunqfXOir0Bt6ZqqybBGUk0gEMZDj5XQqOENn8X:1WlGmo3BuIvOCvTHunqfXpretSybgU+Q
Malware Config
Signatures
Files
-
79d144e23f3c4d13267ab5aa7a34d37ddcadd6811c34973011f4abd818b26f08.dll windows x86
605efad6d48ca0a86a18cfb9d4e193f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
FreeLibrary
CompareStringA
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
GetLastError
SetLastError
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
mfc71lu
ord1168
ord371
ord1093
ord1079
ord762
mslur71
_initterm
_except_handler3
memset
_onexit
__dllonexit
__CppXcptFilter
_adjust_fdiv
__security_error_handler
malloc
free
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 173KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE