Static task
static1
Behavioral task
behavioral1
Sample
8bcbb38b165b99f8e5423a38103de8913ad42606839234e2a247477e1f078410.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8bcbb38b165b99f8e5423a38103de8913ad42606839234e2a247477e1f078410.dll
Resource
win10v2004-20220901-en
General
-
Target
8bcbb38b165b99f8e5423a38103de8913ad42606839234e2a247477e1f078410
-
Size
19KB
-
MD5
d1fa7649a413072ee73e7a04e6b2afe1
-
SHA1
d8c97cd3d7c55c06eda2d0b267b4509404d11952
-
SHA256
8bcbb38b165b99f8e5423a38103de8913ad42606839234e2a247477e1f078410
-
SHA512
81dea212a5eaeec96db77196b8edd35ea6fde16665574e9d177b41c876bfe49b835c07064d92f0a5c363b29b1393b1be518fd7fe13cacbd7b26ecc6672b1e1d4
-
SSDEEP
384:M9S3oiwxJ+lqtIsS5LpoWGbN3cH6vdpkd8R8fM7:kPFOseeWcdm6VP7
Malware Config
Signatures
Files
-
8bcbb38b165b99f8e5423a38103de8913ad42606839234e2a247477e1f078410.dll windows x86
3f43413e4cc805bfb19e82f49b9046ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateThread
DisableThreadLibraryCalls
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
IsBadReadPtr
IsBadWritePtr
Sleep
VirtualProtect
msvcrt
__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memcpy
strstr
user32
GetAsyncKeyState
MessageBeep
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ