Static task
static1
Behavioral task
behavioral1
Sample
801fbac88fcaa569a068347c0366cf15c260a07ced99f6376ec8f145314b8d8f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
801fbac88fcaa569a068347c0366cf15c260a07ced99f6376ec8f145314b8d8f.dll
Resource
win10v2004-20220812-en
General
-
Target
801fbac88fcaa569a068347c0366cf15c260a07ced99f6376ec8f145314b8d8f
-
Size
45KB
-
MD5
61639b50f71c9c37b8643ec70d9946f5
-
SHA1
aba0fb3bad900dc5c5a39c1fb99a1fa845990fc6
-
SHA256
801fbac88fcaa569a068347c0366cf15c260a07ced99f6376ec8f145314b8d8f
-
SHA512
76ed4ff14c56afc1d41b6cd65d6f25ac39c391f2f7ea9fb19ca1a8d3b85583197fefee503c6739357c2271ca9fdbd309076c1596d8735eba7cac39d0dcbcc490
-
SSDEEP
768:uZNCafAdUJ/jZsocYmqH1IyeQRYbjn6x4IsCK92Y+vSn5KWm4jyyiktQEjcBUdwE:uTdZsKiySjn6+T32rvS3AjEkU9sM
Malware Config
Signatures
Files
-
801fbac88fcaa569a068347c0366cf15c260a07ced99f6376ec8f145314b8d8f.dll windows x86
583a031fe7a445b20ecb5d9d5e24b4f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
VirtualProtect
GetCommandLineA
GetVersion
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
msvcrt
__CxxFrameHandler
_except_handler3
malloc
_initterm
free
_wcsicmp
_adjust_fdiv
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 670B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ