Static task
static1
Behavioral task
behavioral1
Sample
850b1e05d22a7f8757ab2fedc6a64ba7f5dd146de9c6b01aac250e0e9584ea7f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
850b1e05d22a7f8757ab2fedc6a64ba7f5dd146de9c6b01aac250e0e9584ea7f.dll
Resource
win10v2004-20220812-en
General
-
Target
850b1e05d22a7f8757ab2fedc6a64ba7f5dd146de9c6b01aac250e0e9584ea7f
-
Size
32KB
-
MD5
d4cf5b0b474d2158439cf3411a68e736
-
SHA1
a8c19ab041e50834e257a161b34ea354e5fd5c00
-
SHA256
850b1e05d22a7f8757ab2fedc6a64ba7f5dd146de9c6b01aac250e0e9584ea7f
-
SHA512
815a14d45722c57e85e387e981bf72554c75502eec5a6b00fcfed66d2c477f4a119c382c817fc870c730a74836b19566cc6e0facf262a069595b46b2eb907519
-
SSDEEP
768:MS5yO/Z505E7ZXheH6B6DwBvyBkqspTXVMZX+MX0AKKU:V5yO/Z50udX4H6C8A9sdXE1XIJ
Malware Config
Signatures
Files
-
850b1e05d22a7f8757ab2fedc6a64ba7f5dd146de9c6b01aac250e0e9584ea7f.dll windows x86
a3c62cad3b654e98379290aed80d751d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_onexit
__dllonexit
??1type_info@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
strtol
kernel32
GlobalAlloc
GetModuleHandleA
CreateThread
GetProcAddress
LoadLibraryA
GetCurrentProcessId
LocalFree
LocalAlloc
GlobalLock
WriteProcessMemory
OpenProcess
GetWindowsDirectoryA
GlobalFree
CloseHandle
GlobalUnlock
WriteFile
CreateFileA
user32
FindWindowExA
FindWindowA
GetDesktopWindow
GetWindowDC
GetWindowRect
GetDC
ReleaseDC
wsprintfA
SetWindowPos
gdi32
SelectPalette
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
GetObjectA
GetStockObject
RealizePalette
GetDIBits
mfc42
ord1243
ord1176
ord6467
ord1578
ord600
ord826
ord269
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ