Static task
static1
Behavioral task
behavioral1
Sample
6fe3c6ced13c8691f404d00995f227911efbb74bd7f9afeacc43357cce6b2f8c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6fe3c6ced13c8691f404d00995f227911efbb74bd7f9afeacc43357cce6b2f8c.dll
Resource
win10v2004-20220812-en
General
-
Target
6fe3c6ced13c8691f404d00995f227911efbb74bd7f9afeacc43357cce6b2f8c
-
Size
112KB
-
MD5
1d1882eb7729b15ffc48c1401fac90b7
-
SHA1
0e133a32ec1a4d5351bd3d9d240e113987e90f43
-
SHA256
6fe3c6ced13c8691f404d00995f227911efbb74bd7f9afeacc43357cce6b2f8c
-
SHA512
9545dfdfe24d3e01abb69e49a04cdc701cdb6bf09ed69941a73748ce4fef3ffa41dc7c3e49c9eae620005ab98f38dc1750b900ee73f10648c3b87162d2c02ff8
-
SSDEEP
384:6627/3dmzZMnDjrXaVWjkSRTk7+YRZYRMMxW8CeWL6b:662bNmtMXrX5IIQ7+YPYqMeL6b
Malware Config
Signatures
Files
-
6fe3c6ced13c8691f404d00995f227911efbb74bd7f9afeacc43357cce6b2f8c.dll windows x86
2856ba73c9de02b9678588d4fb3d84da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42d
ord4525
ord2255
ord734
ord3403
ord4405
ord2130
ord1510
ord5086
ord4443
ord3555
ord2044
ord3059
ord899
ord901
ord824
ord823
ord590
ord813
ord2168
ord342
ord511
ord943
ord485
ord721
ord736
ord737
ord880
ord2640
ord492
ord684
ord487
ord4123
ord1100
msvcrtd
_malloc_dbg
_adjust_fdiv
_free_dbg
_onexit
__dllonexit
_ftol
atoi
time
srand
rand
memset
__CxxFrameHandler
_chkesp
_initterm
kernel32
GetTempPathA
GetFileAttributesA
GetSystemDirectoryA
GetLocalTime
WinExec
advapi32
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ