Static task
static1
Behavioral task
behavioral1
Sample
37d68a87d05291145517e72399593ec13b76fb474b6a9f9642c209b479549329.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
37d68a87d05291145517e72399593ec13b76fb474b6a9f9642c209b479549329.dll
Resource
win10v2004-20220812-en
General
-
Target
37d68a87d05291145517e72399593ec13b76fb474b6a9f9642c209b479549329
-
Size
62KB
-
MD5
8b9205bceb62b953467f929b7f991300
-
SHA1
e2567dcde2d7c622ad2f9f181c475cf455356645
-
SHA256
37d68a87d05291145517e72399593ec13b76fb474b6a9f9642c209b479549329
-
SHA512
89187e95e6f59812ff1a5d8f19ba535862918068a4b39fae2322863e7899a6c315e8f1cc4ab56ec6b98e83ac7489c37ec7f82373fc90594a1ec25b9b9677ad91
-
SSDEEP
384:5yb4Dg5fwtlGV6sbiGNcWEXBJbygXBcUDgTrBHggoT/NwrL9jskTQ6r+L9jskTQw:MMDVfICYbmbMJpuKskTQ6QskTQ6
Malware Config
Signatures
Files
-
37d68a87d05291145517e72399593ec13b76fb474b6a9f9642c209b479549329.dll windows x86
4d46600479b690a5ed6b18628e374bc9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
CreateFileA
VirtualAlloc
GetOEMCP
GetCurrentProcess
GetCommandLineA
lstrlenW
GetCommandLineW
HeapAlloc
HeapFree
GetProcessHeap
GetProcAddress
SearchPathW
FindResourceW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetVersionExW
GetLocaleInfoW
CreateFileMappingW
LoadLibraryExW
FindResourceExW
LoadResource
SetLastError
CreateFileW
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetPrivateProfileIntW
GetPrivateProfileIntA
GetPrivateProfileStringW
GetPrivateProfileStringA
GetFullPathNameW
GetFullPathNameA
GetLocaleInfoA
LoadLibraryExA
GetUserDefaultLCID
LoadLibraryW
GetUserDefaultLangID
HeapReAlloc
user32
LoadCursorW
LoadCursorA
advapi32
RegOpenKeyA
RegQueryValueExA
Sections
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata5 Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg7 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg5 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text9 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ