Static task
static1
Behavioral task
behavioral1
Sample
a947e9f4215d789d717107e6f7c20ea0a7b272112aae5f1a7da57fce17978687.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a947e9f4215d789d717107e6f7c20ea0a7b272112aae5f1a7da57fce17978687.dll
Resource
win10v2004-20220812-en
General
-
Target
a947e9f4215d789d717107e6f7c20ea0a7b272112aae5f1a7da57fce17978687
-
Size
181KB
-
MD5
5fc6334c9dd8bbb67a04a17eece9df70
-
SHA1
e061f864a422afc3814dfe6a670c55758ce79d1c
-
SHA256
a947e9f4215d789d717107e6f7c20ea0a7b272112aae5f1a7da57fce17978687
-
SHA512
81fca74e73f9c50bd019c4dffd492d56cba107092a3e52371d17713f2246d1b7ea196d59a831b8f56a81baca98c4cb4dea49f8a7d2c0a1f3fa7c9e994875c102
-
SSDEEP
3072:FNvkBk74UjvvFjT9gH8GAr53S2jbxWGqXS2jbxWGq:/vJ74AfbGCSbGqXSbGq
Malware Config
Signatures
Files
-
a947e9f4215d789d717107e6f7c20ea0a7b272112aae5f1a7da57fce17978687.dll windows x86
579f1cb523909f9a99368724197ace7f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
VirtualAlloc
GetStartupInfoW
CreateFileA
GetCurrentThread
user32
LoadIconA
LoadIconW
gdi32
GetStockObject
advapi32
RegOpenKeyExW
shell32
ShellExecuteW
msvcrt
_except_handler3
__getmainargs
Sections
.55519 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55518 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55517 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55514 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55513 Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55512 Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55516 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 554B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 962B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ