DoWork
Static task
static1
Behavioral task
behavioral1
Sample
dc35b53529ca502c3175fbc980b19f6cf4affdb0951ce9a8a9acb071a3fe9869.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc35b53529ca502c3175fbc980b19f6cf4affdb0951ce9a8a9acb071a3fe9869.dll
Resource
win10v2004-20221111-en
General
-
Target
dc35b53529ca502c3175fbc980b19f6cf4affdb0951ce9a8a9acb071a3fe9869
-
Size
47KB
-
MD5
0ad12da6b3d327ac2345a610871684e0
-
SHA1
ef2527d79aefad607eb385784d855add2d87f7d4
-
SHA256
dc35b53529ca502c3175fbc980b19f6cf4affdb0951ce9a8a9acb071a3fe9869
-
SHA512
08017e09b91cd8b68014a379b01d0da4abc681d4b54955c73f2c09756bdfe32be2a76ec1b5a86e1ccc2d6acc0ab0c5eec3fd4241ee359b41005f53802ac9509e
-
SSDEEP
768:ZDOXSOlbHHc9cnyrPPDzYl23d5WGkesP8j:FO57HjyrPf4aum
Malware Config
Signatures
Files
-
dc35b53529ca502c3175fbc980b19f6cf4affdb0951ce9a8a9acb071a3fe9869.dll windows x86
66ef28972cc1beddad4141d8a54ceffe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetTempPathA
lstrlenA
CloseHandle
CreateFileA
GetFileSize
GetModuleFileNameA
GetTempFileNameA
ReadFile
SetFilePointer
VirtualAlloc
WinExec
WriteFile
Exports
Exports
Sections
.text Size: 512B - Virtual size: 490B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 467B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 130B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ