tom
Static task
static1
Behavioral task
behavioral1
Sample
2a483146b8333a3fe716fa04a31773177847b4294e64503c4232955bd1a9c233.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a483146b8333a3fe716fa04a31773177847b4294e64503c4232955bd1a9c233.dll
Resource
win10v2004-20221111-en
General
-
Target
2a483146b8333a3fe716fa04a31773177847b4294e64503c4232955bd1a9c233
-
Size
1.3MB
-
MD5
23696da0f0909969392495d5eceeda02
-
SHA1
4f2876a3a2977750a2b99bea61f84b41975f4384
-
SHA256
2a483146b8333a3fe716fa04a31773177847b4294e64503c4232955bd1a9c233
-
SHA512
a7405d8ed59551027244fba16788c5a8e01885cc42ceb4db8556a3be4341f79f5f687aaebbc0e865c99f0aa142b7aaa977c044a15e4a5fd25ec3921837e02c87
-
SSDEEP
24576:2/D1guoQFwpzQJV/JhBFtKnXSCZD1o8DbfK8JIVCNiULEAcQ:2/DOuXapslJp0XSCRCGfVKYlJ
Malware Config
Signatures
Files
-
2a483146b8333a3fe716fa04a31773177847b4294e64503c4232955bd1a9c233.dll windows x86
dd4f9f5e14b212917a097b0ff479dc51
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetTickCount
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
ShowOwnedPopups
advapi32
RegCloseKey
oleaut32
SafeArrayGetLBound
version
GetFileVersionInfoA
gdi32
IntersectClipRect
ole32
OleInitialize
comctl32
ImageList_GetIconSize
wsock32
WSAAsyncSelect
netapi32
Netbios
Exports
Exports
Sections
CODE Size: - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 61B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 766KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp2 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ