Static task
static1
Behavioral task
behavioral1
Sample
1528fce33c1f2157114e6c7e04015d7a2dda348e4170f94da9104e840b0afd20.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1528fce33c1f2157114e6c7e04015d7a2dda348e4170f94da9104e840b0afd20.dll
Resource
win10v2004-20221111-en
General
-
Target
1528fce33c1f2157114e6c7e04015d7a2dda348e4170f94da9104e840b0afd20
-
Size
61KB
-
MD5
7ca5e2b9a03cf1d41b9bcedc3c611ac0
-
SHA1
4498d35dda39cb77700eab6ec6173d142852a018
-
SHA256
1528fce33c1f2157114e6c7e04015d7a2dda348e4170f94da9104e840b0afd20
-
SHA512
1334f2a9781ed0fbaeee927a0d06acf16a186efc9aa5d84e9bf9ff63b45792d6730d233bdd3ecb813c0629652b2193f358d330f5c354c33b994a4c043bab94a8
-
SSDEEP
768:V0qTWzj2F4i6diy27NbH78VDWskTQ6QskTQ64b:V0UWvhB0y2J8lWssQtssQz
Malware Config
Signatures
Files
-
1528fce33c1f2157114e6c7e04015d7a2dda348e4170f94da9104e840b0afd20.dll windows x86
bf16773d2eb9fe359f4ddeca714f5def
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
LoadLibraryA
GetCommandLineA
lstrlenW
GetCommandLineW
HeapAlloc
HeapFree
GetProcessHeap
GetProcAddress
SearchPathW
FindResourceW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetVersionExW
GetLocaleInfoW
CreateFileMappingW
LoadLibraryExW
FindResourceExW
LoadResource
SetLastError
CreateFileW
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetPrivateProfileIntW
GetPrivateProfileIntA
GetPrivateProfileStringW
GetPrivateProfileStringA
GetFullPathNameW
GetFullPathNameA
GetLocaleInfoA
LoadLibraryExA
GetUserDefaultLCID
LoadLibraryW
GetUserDefaultLangID
HeapReAlloc
user32
LoadIconA
LoadCursorW
LoadCursorA
advapi32
RegOpenKeyA
RegQueryValueExW
Sections
ggg2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata5 Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg5 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text9 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ