Static task
static1
Behavioral task
behavioral1
Sample
79e60b9728faebb177ed09ca5e107ffbb1c1325bc023e583531979cc07cc1dde.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
79e60b9728faebb177ed09ca5e107ffbb1c1325bc023e583531979cc07cc1dde.dll
Resource
win10v2004-20221111-en
General
-
Target
79e60b9728faebb177ed09ca5e107ffbb1c1325bc023e583531979cc07cc1dde
-
Size
181KB
-
MD5
ea5d9fb59388165cf2a0c649f76ad060
-
SHA1
ee99766e9cd0d55a4866872743991df68b78f8a9
-
SHA256
79e60b9728faebb177ed09ca5e107ffbb1c1325bc023e583531979cc07cc1dde
-
SHA512
8c0cb06678a27a4ca3c6032443a8ae5463dcc0a134294e1d2a263dd5cd82738a267b324ddcae5407221530ab7d077d74c82d17b9fc78505ee46558b37a456308
-
SSDEEP
3072:wNvkBk74ZjvvFjT9LIj91rFzGAr53S2jbxWGqXS2jbxWGq:+vJ74hfLc7FzGCSbGqXSbGq
Malware Config
Signatures
Files
-
79e60b9728faebb177ed09ca5e107ffbb1c1325bc023e583531979cc07cc1dde.dll windows x86
579f1cb523909f9a99368724197ace7f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
VirtualAlloc
GetStartupInfoW
CreateFileA
GetCurrentThread
user32
LoadIconA
LoadIconW
gdi32
GetStockObject
advapi32
RegOpenKeyExW
shell32
ShellExecuteW
msvcrt
_except_handler3
__getmainargs
Sections
.55519 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55518 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55517 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55514 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55513 Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55512 Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55516 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 554B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 962B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ