Static task
static1
Behavioral task
behavioral1
Sample
590e84a0d1a30a7872b4dfaacd8c91812f0deeecb5a9a48302ab75b12dfbf8a9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
590e84a0d1a30a7872b4dfaacd8c91812f0deeecb5a9a48302ab75b12dfbf8a9.dll
Resource
win10v2004-20220812-en
General
-
Target
590e84a0d1a30a7872b4dfaacd8c91812f0deeecb5a9a48302ab75b12dfbf8a9
-
Size
71KB
-
MD5
000253ef3e09d9210f3c62b35ab47956
-
SHA1
244b83d8dc66f9c8b6d06133b7872aba19db7dba
-
SHA256
590e84a0d1a30a7872b4dfaacd8c91812f0deeecb5a9a48302ab75b12dfbf8a9
-
SHA512
6976b616f5eb0ad9b1162e39bc0ab7d880805311209be4a7bcc310335fb280541da64cd3217f32373eb8d498ee71ed5c01b1f9731f0fe3026ef8eafce9b05c16
-
SSDEEP
1536:zSl3g73EV3y7wIpUTWuDqYSJqwTxVxlnFSm7eca:zSl3gIV6uOdJq2Il3
Malware Config
Signatures
Files
-
590e84a0d1a30a7872b4dfaacd8c91812f0deeecb5a9a48302ab75b12dfbf8a9.dll windows x86
514c4c1141c3d9d3dcedb42bddd01132
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess
user32
OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu
advapi32
RegOpenKeyExA
Sections
.text Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 92KB
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ