Static task
static1
Behavioral task
behavioral1
Sample
3eb9a800ff3838e1a73c1c09d9983a8a7e3f53178388171d5c3c7617302e5e0f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3eb9a800ff3838e1a73c1c09d9983a8a7e3f53178388171d5c3c7617302e5e0f.dll
Resource
win10v2004-20221111-en
General
-
Target
3eb9a800ff3838e1a73c1c09d9983a8a7e3f53178388171d5c3c7617302e5e0f
-
Size
105KB
-
MD5
a6885a1f7f1a6bc5e78eee634e7c7cc0
-
SHA1
1737195329197bbbad093c5cb3fc11833cf38c49
-
SHA256
3eb9a800ff3838e1a73c1c09d9983a8a7e3f53178388171d5c3c7617302e5e0f
-
SHA512
470c3fdeecd18e07032429a1b8e9a66515bb8ccd5c5f013e46e0c5c1adc5934f41ee38e4ae9f6568d743038c8980abe1d971c557bcc08a9a2c36137fdc03e465
-
SSDEEP
1536:z9tMLS0euadimxbTd2arUQrF9MUx7gALueHJ4BBVOP:+xS/d2MUQrNNLFJ4BB
Malware Config
Signatures
Files
-
3eb9a800ff3838e1a73c1c09d9983a8a7e3f53178388171d5c3c7617302e5e0f.dll windows x86
156db93ec9809e25c9cc2e3fedb58ff5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetStartupInfoW
GetProcessHeap
VirtualAlloc
CreateFileA
user32
LoadIconA
LoadCursorW
LoadCursorA
gdi32
GetStockObject
advapi32
RegQueryValueW
RegCloseKey
RegOpenKeyExA
RegOpenKeyW
RegQueryValueExW
RegDeleteValueW
msvcrt
_except_handler3
Sections
.55531 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55529 Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55519 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bbbbb Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55517 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55514 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55512 Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 614B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ