Static task
static1
Behavioral task
behavioral1
Sample
125e7400161e1cba195e4f34072ec812317af21f4e440b1b78af6e87276745d0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
125e7400161e1cba195e4f34072ec812317af21f4e440b1b78af6e87276745d0.dll
Resource
win10v2004-20220812-en
General
-
Target
125e7400161e1cba195e4f34072ec812317af21f4e440b1b78af6e87276745d0
-
Size
204KB
-
MD5
532664a372a372084d973665a4d98357
-
SHA1
2b40d802e69300265fd748e13450012432706566
-
SHA256
125e7400161e1cba195e4f34072ec812317af21f4e440b1b78af6e87276745d0
-
SHA512
7a2557ef7ea1e5eeb48b71e90c9c828845e155cb81dd7ff01563a7521d9b833039c50c148e04d9eb1755748eb11340252ee46ec665b387db93902424833e0bda
-
SSDEEP
3072:vPcR05zT4tvJpljxC3xASV+704rSoVd9xtF5kj0xdwphLeG1lBFDOs8:vo0xopl/SVl4uIPJ5IRB11D8
Malware Config
Signatures
Files
-
125e7400161e1cba195e4f34072ec812317af21f4e440b1b78af6e87276745d0.dll windows x86
3f5031e7b47adbce1d4a470bd3ca824f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetModuleFileNameA
Sleep
GetTickCount
GetCurrentProcess
OutputDebugStringA
lstrcatA
GetSystemDirectoryA
VirtualAlloc
GetLastError
CloseHandle
DeleteFileA
ExitProcess
FreeLibrary
DisableThreadLibraryCalls
LoadLibraryA
GetProcAddress
GetCurrentDirectoryA
HeapAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
RtlUnwind
TerminateProcess
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InterlockedDecrement
InterlockedIncrement
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
FlushFileBuffers
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ