qfxsorf
Static task
static1
Behavioral task
behavioral1
Sample
2b405ef175d5d3a193c8304d97596fdb1de839036a7372cf14b4ed66ef665b89.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2b405ef175d5d3a193c8304d97596fdb1de839036a7372cf14b4ed66ef665b89.dll
Resource
win10v2004-20220901-en
General
-
Target
2b405ef175d5d3a193c8304d97596fdb1de839036a7372cf14b4ed66ef665b89
-
Size
809KB
-
MD5
750187897531fde1f705807d64b37680
-
SHA1
6974d4db6d19c5594396b4e31341ea0f08eb3be5
-
SHA256
2b405ef175d5d3a193c8304d97596fdb1de839036a7372cf14b4ed66ef665b89
-
SHA512
1c37bc5d8ad9723b545c5f802e3b7194201486a7c2d536b72dc7b8cc4bd9cbab3e1253eea7bbd51d6634afeb8cdbc737dcbe997134df0ca25fb67291f4db8512
-
SSDEEP
12288:1U149fUlU27IFYc4rhE2cBPNN07Rdek2PT9c6LvWMHghEJjgjfiyJlWAqoSQqTOF:1q4RUlUJ/V2b7RToLv7IERmldp7km
Malware Config
Signatures
Files
-
2b405ef175d5d3a193c8304d97596fdb1de839036a7372cf14b4ed66ef665b89.dll windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 110KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uvxewbvl Size: 691KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ybtdujil Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE