HaveFun
Static task
static1
Behavioral task
behavioral1
Sample
188143b51ab873d3b58343f88c06028c9c9fc0795d0f280be7c1d90740a6789c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
188143b51ab873d3b58343f88c06028c9c9fc0795d0f280be7c1d90740a6789c.dll
Resource
win10v2004-20220901-en
General
-
Target
188143b51ab873d3b58343f88c06028c9c9fc0795d0f280be7c1d90740a6789c
-
Size
1.6MB
-
MD5
585159c18db1f562c4945e8ba4efaae7
-
SHA1
5468be1bc9100456bebefffcb46005203c80d7e4
-
SHA256
188143b51ab873d3b58343f88c06028c9c9fc0795d0f280be7c1d90740a6789c
-
SHA512
89378a5b7d10b70af49d8889e6752818287cb33049487a0bccb174d4bd59e177c9f924c8329de105abfc595f1c30a56c032f94c7126c81ee6107295907176bb2
-
SSDEEP
24576:tyn6nHbeC8kPBKn404DsQD432I1kBQOybUxaDBx:tpHbPFg40mH432ImOE8
Malware Config
Signatures
Files
-
188143b51ab873d3b58343f88c06028c9c9fc0795d0f280be7c1d90740a6789c.dll windows x86
fdf923ed4c1354e8f1f9d64c74c30799
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProcessMemory
user32
PostQuitMessage
advapi32
LookupPrivilegeValueA
ws2_32
closesocket
wininet
InternetOpenUrlA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
shell32
SHGetFolderPathW
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ