Static task
static1
Behavioral task
behavioral1
Sample
6b65f82acd8b0868ac55eb59f843e590b2e03b8b733f59aa69c74289023bd758.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b65f82acd8b0868ac55eb59f843e590b2e03b8b733f59aa69c74289023bd758.dll
Resource
win10v2004-20220901-en
General
-
Target
6b65f82acd8b0868ac55eb59f843e590b2e03b8b733f59aa69c74289023bd758
-
Size
26KB
-
MD5
caad37c59c3f5db9ff33273e5a7a2c83
-
SHA1
6fda43c898ca9f7129d9a1ed3825bf1a17e88787
-
SHA256
6b65f82acd8b0868ac55eb59f843e590b2e03b8b733f59aa69c74289023bd758
-
SHA512
83c019250f14b1eeb530ede3b547162083a10f60290985667be23d4b50e1b60e6390fe9a391aad0691cb958eaebccff3efeec5d40aab677750425db8f480251b
-
SSDEEP
384:wMZjfWfBYHiAqVoWb5TwXWX7pl17GtH6xRQ50dYuynFJHzZX8Gl7JguHvF+8P/RK:wMZyfB6izh5G0AEoHrl+uHvxR16qi
Malware Config
Signatures
Files
-
6b65f82acd8b0868ac55eb59f843e590b2e03b8b733f59aa69c74289023bd758.dll windows x86
d3f108b4413d801ddd1b54a7864e621f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
Sleep
GetACP
LoadLibraryA
InterlockedDecrement
InterlockedExchange
IsBadWritePtr
GetProcAddress
GetUserDefaultLCID
MulDiv
VirtualAlloc
VirtualProtect
GetTickCount
IsBadReadPtr
GetModuleFileNameA
GetProcessHeap
user32
GetCursor
GetWindowRect
GetWindowTextA
IsCharLowerA
IsCharUpperA
GetWindowRgn
GetForegroundWindow
GetIconInfo
CopyIcon
GetDlgItem
GetWindow
GetWindowInfo
IsIconic
IsWindowVisible
GetGUIThreadInfo
InSendMessage
GetDesktopWindow
GetClientRect
msvcrt
_errno
__mb_cur_max
_adjust_fdiv
malloc
_initterm
free
_memicmp
memchr
_swab
_hypot
_ultoa
_CIacos
_CIfmod
time
floor
_pctype
_isctype
_CIsinh
gdi32
GdiFlush
GetBkColor
ole32
CoGetCurrentProcess
shell32
DuplicateIcon
ord64
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ