Static task
static1
Behavioral task
behavioral1
Sample
6437fe2a47364b7ca3cbc9216e943684635a797f062c311bb904026cea2c9370.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6437fe2a47364b7ca3cbc9216e943684635a797f062c311bb904026cea2c9370.dll
Resource
win10v2004-20220901-en
General
-
Target
6437fe2a47364b7ca3cbc9216e943684635a797f062c311bb904026cea2c9370
-
Size
131KB
-
MD5
dd5aa4f24858d367049d52f56a1ee450
-
SHA1
db79e3de01d4106128418376edd0371e5412bbeb
-
SHA256
6437fe2a47364b7ca3cbc9216e943684635a797f062c311bb904026cea2c9370
-
SHA512
85522e96454186b6913d3d845c9105f9459d15e0a762cea83edce2395375f5c411ea1f9f61dc9aff2797bf766f83ae1880511d18f6649ca1daa9ebe3196f255d
-
SSDEEP
1536:iYxePdBtE3vUMe8x94fYn/5IYUI/ae8b7AkSDknqQ+FabPUAni5:vgSfUMDx94IaIa5b7AFkMA/n
Malware Config
Signatures
Files
-
6437fe2a47364b7ca3cbc9216e943684635a797f062c311bb904026cea2c9370.dll windows x86
712de924ed7ce2af2f5ae3d66f84eb9b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
CreateFileA
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
GetTimeFormatW
GetModuleHandleA
user32
LoadIconW
LoadIconA
LoadCursorA
advapi32
RegOpenKeyExA
msvcrt
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_controlfp
_except_handler3
_initterm
Sections
.rdata6 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata11 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata10 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata9 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata8 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata7 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdatg Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ