?BattleModeStepAwway@@YG_KPAU_PSP@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
7edc66406fd34c1fa539d11a4277feac3209c9ec6cdc88ab80bd524b8d278f96.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7edc66406fd34c1fa539d11a4277feac3209c9ec6cdc88ab80bd524b8d278f96.dll
Resource
win10v2004-20220812-en
General
-
Target
7edc66406fd34c1fa539d11a4277feac3209c9ec6cdc88ab80bd524b8d278f96
-
Size
147KB
-
MD5
b2f05f1e5f34cf08e07a91da945a2e8b
-
SHA1
166e0501675ab418ae0da1c8d9c48a9a8b0d2e71
-
SHA256
7edc66406fd34c1fa539d11a4277feac3209c9ec6cdc88ab80bd524b8d278f96
-
SHA512
62f1792e3243aa5192b96f4ea48b2bef1339281a637ef55828a9cf71c16a395b6adf526662aee955e46d24ed974a75c0f33fd5417b217ef62bfa1ab9387da2cb
-
SSDEEP
3072:sTWRkjh//NNxZ7whYcQJof1FShetYXQZE9gclYZELEwv+r1faxE9d:MWRkN//vx9ubQCfnq+G8EP3v+rxa4
Malware Config
Signatures
Files
-
7edc66406fd34c1fa539d11a4277feac3209c9ec6cdc88ab80bd524b8d278f96.dll windows x86
4c2659c60a42fc94b6d7f0ae05a1b71d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
VkKeyScanA
kernel32
LoadLibraryA
Exports
Exports
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rtop Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ltop Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.stop Size: 1024B - Virtual size: 610B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rtext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.stext Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.atext Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mtext Size: - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ